diff --git a/DysonNetwork.Drive/Client/src/views/index.vue b/DysonNetwork.Drive/Client/src/views/index.vue
index 8916557..7f81ae2 100644
--- a/DysonNetwork.Drive/Client/src/views/index.vue
+++ b/DysonNetwork.Drive/Client/src/views/index.vue
@@ -52,6 +52,9 @@
           </div>
 
           <div v-if="bundleUploadMode" class="mt-3">
+            <div class="mb-3">
+              <file-pool-select v-model="filePool" @update:pool="currentFilePool = $event" />
+            </div>
             <upload-area
               :filePool="filePool"
               :pools="pools as SnFilePool[]"
diff --git a/DysonNetwork.Drive/Storage/BundleController.cs b/DysonNetwork.Drive/Storage/BundleController.cs
index 7c68eb7..9eeeb1c 100644
--- a/DysonNetwork.Drive/Storage/BundleController.cs
+++ b/DysonNetwork.Drive/Storage/BundleController.cs
@@ -22,15 +22,10 @@ public class BundleController(AppDatabase db) : ControllerBase
     }
 
     [HttpGet("{id:guid}")]
-    [Authorize]
     public async Task<ActionResult<FileBundle>> GetBundle([FromRoute] Guid id, [FromQuery] string? passcode)
     {
-        if (HttpContext.Items["CurrentUser"] is not Account currentUser) return Unauthorized();
-        var accountId = Guid.Parse(currentUser.Id);
-
         var bundle = await db.Bundles
             .Where(e => e.Id == id)
-            .Where(e => e.AccountId == accountId)
             .Include(e => e.Files)
             .FirstOrDefaultAsync();
         if (bundle is null) return NotFound();
@@ -155,4 +150,4 @@ public class BundleController(AppDatabase db) : ControllerBase
 
         return NoContent();
     }
-}
\ No newline at end of file
+}