diff --git a/app/Http/Controllers/Api/ProfileController.php b/app/Http/Controllers/Api/ProfileController.php
index 6408414..2d21ae5 100644
--- a/app/Http/Controllers/Api/ProfileController.php
+++ b/app/Http/Controllers/Api/ProfileController.php
@@ -129,6 +129,7 @@ class ProfileController extends Controller
      */
     public function show(string $id): JSONResponse
     {
+        // attempt to access profile, only for allowed roles
         if (!Gate::any(['petani', 'fasilitator', 'offtaker'])) {
             abort(403);
         }