Can I use normal RBAC system for production on Phalcon framework?
You can use normal ACL in Phalcon https://docs.phalcon.io/en/latest/reference/acl.html
I know about ACL, and what, if I want RBAC?
Phalcon only supports ACL as you can see in the documentation
I saw it. Maybe I can use some outside module for RBAC?
Probably you can integrate: https://github.com/OWASP/rbac