From b56078ae5817f961f5998ab2e56d64f4ec141b68 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= Date: Mon, 28 Apr 2025 11:21:29 +0200 Subject: [PATCH] fix: remove overzealous access check rendering invoice download impossible --- src/Controller/Booking/DownloadController.php | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/src/Controller/Booking/DownloadController.php b/src/Controller/Booking/DownloadController.php index a26aeda..a343b73 100644 --- a/src/Controller/Booking/DownloadController.php +++ b/src/Controller/Booking/DownloadController.php @@ -16,7 +16,6 @@ use Symfony\Component\HttpFoundation\StreamedResponse; use Symfony\Component\Routing\Attribute\Route; use Symfony\Component\Security\Http\Attribute\IsGranted; use Symfony\Contracts\Cache\CacheInterface; - use function Symfony\Component\String\u; class DownloadController extends AbstractController @@ -62,17 +61,6 @@ class DownloadController extends AbstractController 'booking_id' => $id, ]); - // Fetch booking data via API and cache result for a short ttl to check permissions - $bookingData = $this->fetchBookingData($email, $password, $id); - - if (null === $bookingData || $bookingData instanceof Notification) { - $this->addFlash('error', 'Buchungsdaten nicht (mehr) verfügbar'); - - return $this->redirectToRoute('app_bookings'); - } - - $this->denyAccessUnlessGranted('VIEW', $bookingData); - try { $file = $this ->apiClient