diff --git a/src/Controller/Booking/DownloadController.php b/src/Controller/Booking/DownloadController.php
index a26aeda..a343b73 100644
--- a/src/Controller/Booking/DownloadController.php
+++ b/src/Controller/Booking/DownloadController.php
@@ -16,7 +16,6 @@ use Symfony\Component\HttpFoundation\StreamedResponse;
 use Symfony\Component\Routing\Attribute\Route;
 use Symfony\Component\Security\Http\Attribute\IsGranted;
 use Symfony\Contracts\Cache\CacheInterface;
-
 use function Symfony\Component\String\u;
 
 class DownloadController extends AbstractController
@@ -62,17 +61,6 @@ class DownloadController extends AbstractController
             'booking_id' => $id,
         ]);
 
-        // Fetch booking data via API and cache result for a short ttl to check permissions
-        $bookingData = $this->fetchBookingData($email, $password, $id);
-
-        if (null === $bookingData || $bookingData instanceof Notification) {
-            $this->addFlash('error', 'Buchungsdaten nicht (mehr) verfügbar');
-
-            return $this->redirectToRoute('app_bookings');
-        }
-
-        $this->denyAccessUnlessGranted('VIEW', $bookingData);
-
         try {
             $file = $this
                 ->apiClient