want to implement a front-end privilege management similar to discuz:

1. Management group (ordinary members, moderators, VIP, etc.)
2. user level (level1, level2, etc.; different levels, different permissions)

each user belongs to an administrative group and corresponds to a user level ; the two permissions seem to overlap in some convenience

looked at the source code of discuz , its implementation idea is a variety of if judgments, so the judgment of permissions is very flexible, but the disadvantage is that it does not seem to be easy to maintain.

RBAC is more suitable for managing permission control in the background.
I don"t know if there is a good solution for such front-end rights management.
such permissions what should I pay attention to in terms of data table design ?