@RequestMapping(value = "/viewrecord.html", method = RequestMethod.GET) public String viewRecord(@RequestParam Map<String, Object> map, Map<String, Object> mapresp) { User currentUser = getCurrentUser(); String paramId = (String) map.get("id"); Integer id; try { id = Integer.parseInt(paramId); } catch (NumberFormatException e) { mapresp.put("errMesg", "Incorect record id"); return "redirect:/records.html"; } Record record = recordService.getRecord(id); if (record != null) { if (!record.getUser().equals(currentUser) && record.getAccess().getId() != 2) { record = null; } } else { mapresp.put("errMesg", "Incorect record id"); return "redirect:/records.html"; } List<FileView> fileDescription = fileDescriptionService.getFilesDescription(record); mapresp.put("filelist", fileDescription); mapresp.put("currentuser", getCurrentUser()); mapresp.put("record", record); return "viewrecord"; }