How it is possible to distinguish users besides rbac?

Question

Yii

For a user with a specific password and login to log in (I hope I explained it clearly)

Answer 1

For a user with a specific password and login to log in (I hope I explained it clearly)

This, as Maxim Timofeev said, is called authorization by login and password and does not relate to access control in any way.
As far as I understand, you just want to make certain sections of the site inaccessible to unauthorized people. In this case you can use access control filters

Answer 2

You asked two unrelated questions, and in a very abstract way.
To do this, there is authorization by login and password. RBAC is for completely different purposes, for example, so that of all those who enter, some have access to the admin panel, and some do not. Or give the right to edit only their posts.
No matter how you differentiate, you get RBAC. You can't ban something and call it not a ban. Perhaps you are looking for an RBAC different from what is in yii2 out of the box? Then another conversation. But you need to understand why this one does not tire you, in order to advise other methods. As for me, it is super flexible and can solve any problem. The main thing is to know how to cook it))). Describe the question in at least a couple of sentences.