Am I going in the right direction?

Hey everyone. I’m pretty new to PHP and it’s just starting to click so I wanted to see if my understanding is the best or easiest way to go about what I want to do.

I took a tutorial on creating a system for creating articles and then making a page to list articles and a page to view articles. This is all working great.

What I want to do is make it so my staff members can submit news but if someone isn’t a staff member and somehow stumbles across the staff page they won’t be able to view it. So I have a login system that is very basic and allows you to register and login.

Am I correct in thinking the right way to restrict access could be using cookies to check if the user is logged in and has the right permission level? If they do echo the page content, if not echo the login form or say restricted access?

Is this a good way to go about restricting pages?