Hi, About pages protected access, I think that the tapestry5-portlet module will provide (through portal platform) implementations of much of the common functionality that any web-based application would require: role-based security (including authentication and authorization), user registration and administration, self resetting of user passwords.
In the mean time, I'm using Chenillekit Access module. Best Regards, Marcus