How are access distributions implemented in practice?

Question

Information Security

Good morning everyone!
Now I'm working on a project that requires the creation of a system for distributing access rights. This task includes the following:
- Restricting access to corporate pages
- Restricting access to certain parts of the site (for example, to widgets or which components) The
list is not complete, but already at this stage I was faced with the problem of not knowing how to organize such a system.
I ask you to give useful advice and a link to the literature, I will be very grateful.
And for complete answers ("advice" + "link") I will immediately like and mark the solution. Thank you.

Answer 1

Better than RBAC , they didn't seem to come up with anything.
Here is the implementation of RBAC with laravel code as an example https://habr.com/post/321678/
ACL - not such a convenient thing, but very flexible, it was widely used before, and is still used in some places.
In general, there are many more approaches, you can follow the "see also" links from these articles.