There's a few options: Tynamo's tapestry-security http://tynamo.org/tapestry-security+guide
tapestry-spring-security http://www.localhost.nu/java/tapestry-spring-security/conf.html Or you could roll-your-own http://tapestryjava.blogspot.co.uk/search/label/security