Restrict access to page of a modular page

I have a modular page and want to restrict access to a particular subpage and the pages contained therein.

I have
access:
site.login: true
in the subpage and all of its pages and still the content displays.

I have tested also with a simple text page and it displays despite the access retriction.

Is this something that should work or not?

Thanks