Best Practices for Implementing Role-Based Access Control in CodeIgniter 4

Hi Everyone,
I'm working on a web application using CodeIgniter 4 and need some advice on implementing a secure and scalable Role-Based Access Control (RBAC) system. I’ve come across different approaches, but I’m looking for guidance on the most efficient and maintainable way to handle user roles and permissions.
Here’s a bit of context:

• My application requires user roles like Admin, Manager, and User, each with different access levels.
  
• Users need varying permissions to access controllers, methods, and specific resources.
  
• I want a solution that’s easy to manage, scalable for future roles, and minimizes database queries.
  

I’ve seen solutions that involve:

1. Storing roles and permissions in the database and checking access in controllers using middleware.
   
2. Using filters to handle permissions, but I’m unsure how to best configure them for dynamic role checks.
   
3. Extending BaseController to handle access control.
   

Questions I have:

• What’s the best approach for integrating RBAC in CodeIgniter 4 while maintaining performance?
  
• Is it better to handle role checks in controllers, middleware, or elsewhere?
  
• Should I use a third-party library, or is it better to create a custom solution?
  
• Are there any pitfalls I should be aware of when implementing RBAC in CI4?
  

If anyone has a sample implementation or can point me to a detailed guide, it would be greatly appreciated! Any best practices for azure interview questions or personal experiences would also be helpful.
Thanks in advance for your help!

Why not use CodeIgniter 4 Shield?
CodeIgniter Shield

What did you Try? What did you Get? What did you Expect?

Joined CodeIgniter Community 2009.  ( Skype: insitfx )

Why waste time? use Appskull

Demo: https://appskull.nudasoft.com/en/auth?ne...sOFt/users
Docs: https://docs.nudasoft.com/appskull/

Why not just use the shield package from the official Codeigniter? The Bonfire2 package offers more real-time implementation.