diff --git a/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java b/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
index 5070e96..bd98b30 100644
--- a/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
+++ b/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
@@ -119,9 +119,6 @@ public class AttributeEndpointsResourceProvider implements RealmResourceProvider
                 .toList();
 
         UserProvider userProvider = session.users();
-        // getRoleMembersStream only returns users with matchRole assigned directly; it misses
-        // users who have the role via group membership (incl. parent groups) or composite roles.
-        // hasRole() resolves the role the same way authUser.hasRole(authRole) does above.
         Stream<UserModel> users = userProvider.searchForUserStream(realm, Map.of())
                 .filter(user -> user.hasRole(matchRole));