From f9c800960009d63e3c39d4e1a297039109ff00ff Mon Sep 17 00:00:00 2001 From: "fauzgabriel@gmail.com" Date: Tue, 28 Apr 2026 14:04:53 +0700 Subject: [PATCH] allowing offtaker to get their profile --- app/Http/Controllers/Api/ProfileController.php | 1 + 1 file changed, 1 insertion(+) diff --git a/app/Http/Controllers/Api/ProfileController.php b/app/Http/Controllers/Api/ProfileController.php index 6408414..2d21ae5 100644 --- a/app/Http/Controllers/Api/ProfileController.php +++ b/app/Http/Controllers/Api/ProfileController.php @@ -129,6 +129,7 @@ class ProfileController extends Controller */ public function show(string $id): JSONResponse { + // attempt to access profile, only for allowed roles if (!Gate::any(['petani', 'fasilitator', 'offtaker'])) { abort(403); }