allowing offtaker to get their profile

2026-04-28 14:04:53 +07:00
parent e3cd87c67a
commit f9c8009600
1 changed files with 1 additions and 0 deletions
@@ -129,6 +129,7 @@ class ProfileController extends Controller
     */
    public function show(string $id): JSONResponse
    {
+        // attempt to access profile, only for allowed roles
        if (!Gate::any(['petani', 'fasilitator', 'offtaker'])) {
            abort(403);
        }