From a1d49f3c75c8a59dd01b58fa0738687c347fd46e Mon Sep 17 00:00:00 2001
From: danloa <danloa@gmail.com>
Date: Fri, 9 Feb 2024 14:37:25 -0400
Subject: [PATCH] Add preview endpoints for permissions based on projects

---
 ProcessMaker/Providers/AuthServiceProvider.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/ProcessMaker/Providers/AuthServiceProvider.php b/ProcessMaker/Providers/AuthServiceProvider.php
index ed40c1ecdf..0d87b7b240 100644
--- a/ProcessMaker/Providers/AuthServiceProvider.php
+++ b/ProcessMaker/Providers/AuthServiceProvider.php
@@ -158,9 +158,11 @@ private function checkAllowedEndpoints(array $projectIds, string $currentPath):
             } elseif ($assetType === Screen::class) {
                 $allowedEndpoints[] = "designer/screen-builder/{$assetId}/edit";
                 $allowedEndpoints[] = "designer/screens/{$assetId}/edit";
+                $allowedEndpoints[] = 'designer/screens/preview';
             } elseif ($assetType === Script::class) {
                 $allowedEndpoints[] = "designer/scripts/{$assetId}/builder";
                 $allowedEndpoints[] = "designer/scripts/{$assetId}/edit";
+                $allowedEndpoints[] = 'designer/scripts/preview';
             }
 
             if (class_exists($dataSourceClass) && $assetType === $dataSourceClass) {
@@ -168,9 +170,6 @@ private function checkAllowedEndpoints(array $projectIds, string $currentPath):
             }
             if (class_exists($decisionTableClass) && $assetType === $decisionTableClass) {
                 $allowedEndpoints[] = "decision-tables/table-builder/{$assetId}/edit";
-                $allowedEndpoints[] = 'designer/scripts/' . $assetId . '/builder';
-                $allowedEndpoints[] = 'designer/scripts/' . $assetId . '/edit';
-                $allowedEndpoints[] = 'designer/scripts/preview';
             }
         }