diff --git a/app/Http/Controllers/Api/DistributionController.php b/app/Http/Controllers/Api/DistributionController.php
index 888927c..bf51bfe 100644
--- a/app/Http/Controllers/Api/DistributionController.php
+++ b/app/Http/Controllers/Api/DistributionController.php
@@ -13,7 +13,7 @@ class DistributionController extends Controller
 {
     public function index(): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani'])) {
+        if (!Gate::any(['super_admin', 'petani','fasilitator'])) {
             abort(403);
         }
 
diff --git a/app/Http/Controllers/Api/PanenController.php b/app/Http/Controllers/Api/PanenController.php
index bcd44de..87c117e 100644
--- a/app/Http/Controllers/Api/PanenController.php
+++ b/app/Http/Controllers/Api/PanenController.php
@@ -29,7 +29,9 @@ class PanenController extends Controller
 
     public function store(Request $request): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
 
         $validated = $request->validate([
             'land_id' => ['required', 'integer'],
@@ -56,14 +58,18 @@ class PanenController extends Controller
 
     public function show(string $id): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $panen = Panen::findOrFail($id);
         return response()->json($panen);
     }
 
     public function update(Request $request, string $id): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $panen = Panen::findOrFail($id);
 
         $validated = $request->validate([
@@ -89,7 +95,9 @@ class PanenController extends Controller
      */
     public function batchUpsert(Request $request): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (Gate::authorize(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $profileId = Auth::user()->profile->id;
 
         $validated = $request->validate([