diff --git a/app/controllers/admin/product_preview_controller.rb b/app/controllers/admin/product_preview_controller.rb
index 2ea48d74fc..8712d5497c 100644
--- a/app/controllers/admin/product_preview_controller.rb
+++ b/app/controllers/admin/product_preview_controller.rb
@@ -4,6 +4,7 @@ module Admin
   class ProductPreviewController < Spree::Admin::BaseController
     def show
       @product = Spree::Product.find(params[:id])
+      authorize! :show, @product
 
       respond_with do |format|
         format.turbo_stream {
@@ -11,5 +12,11 @@ module Admin
         }
       end
     end
+
+    private
+
+    def model_class
+      Spree::Product
+    end
   end
 end
diff --git a/spec/system/admin/products_v3/actions_spec.rb b/spec/system/admin/products_v3/actions_spec.rb
index 0da32832a6..a4a6fc387a 100644
--- a/spec/system/admin/products_v3/actions_spec.rb
+++ b/spec/system/admin/products_v3/actions_spec.rb
@@ -481,7 +481,6 @@ RSpec.describe 'As an enterprise user, I can manage my products' do
       let!(:variant) { create(:variant, product:) }
 
       it "show product preview modal" do
-        login_as_admin
         visit admin_products_url
 
         within row_containing_name("Apples") do