diff --git a/services/authorize.go b/services/authorize.go
index 235abeb..10dd926 100644
--- a/services/authorize.go
+++ b/services/authorize.go
@@ -59,7 +59,7 @@ func Authorize(ctx *models.AuthorizationContext) (*models.AuthorizationResult, e
 	}
 	log.Printf("[AuthZ Step 3] Policies retrieved: %d policies to evaluate", len(policies))
 
-	// Step 4: Evaluate ABAC policies
+	log.Printf("[AuthZ Step 4] Using RoleID: %s (from context or user record)", ctx.RoleID)
 	allowed, reason := EvaluatePolicies(policies, ctx)
 
 	result := &models.AuthorizationResult{