I am looking for the best way to restrict access to drupal pages such as
Do I add rewrite rules to the .htaccess file?
Drupal Answers is a question and answer site for Drupal developers and administrators. It only takes a minute to sign up.Sign up to join this community
One way to restrict access to specific paths is to use the Custom Permissions module.
It allows you to create path based permissions at /admin/people/custom_permissions.
Then you can configure which roles have those custom permissions as you would any other permission at /admin/people/permissions.
I probably wouldn't use this solution if I had a very large number of paths to restrict but it's a very usable solution for a few pages, especially if you still want admins to be able to access them.
.htaccess restrictions are also possible if you want to go that way. That would mean there would be no database load involved in restricting access, which might be a consideration for very high traffic sites but would generally be negligible for an average site.