The best login and authorization concept

I'm working on an application that will run on a local network so I do not need any super security ... it's about basic logging and checking permissions for the requested resource. I think what I have to do is use the ci_sessions table and the session mechanisms used in CI4. There is a need for a user table and hashed password, as well as a table with controller permissions / method ... User registration or password recovery is no longer important for me, additional functionalities ... your way would be to use an example from CI4 creators as you would introduce Basic logging mechanism. Everywhere I've seen it is everyone's defense before giving an example of the claim that everyone is doing it individually but not necessarily optimally and safely ...