try {
User user = securityManager.getUserByLoginName(SecurityContextHolder.getContext().getAuthentication().getName());
Study study = requestManager.getStudyById(studyId);
Project project;
if (study != null) {
if (!study.userCanRead(user)) {
throw new SecurityException("Permission denied.");
}
project = study.getProject();
model.put("formObj", study);
model.put("project", project);