When is RBAC needed?

Question

Yii

For training, I am making a simple website and admin panel (delete a user, delete a record, etc.) using Yii2 advanced.
Only users will be on the site, and only the admin has access to the admin panel.
In the last project, I made a site without an admin panel and checked the user's relationship to the material by its id.
Question 1 : What is bad access through checking by id?
Question 2 :
Now I've been reading about RBAC and I don't understand in what situation it should be applied and what is missing from a simple Access filter?

Answer 1

RBAC is neither better nor worse, they are complementary methods of authorization. The difference is that in the case of RBAC, you describe each permission explicitly, as opposed to implicitly describing it through the code itself. Roles from RBAC can be specified in the Access Filter.