class FinanceChecksNotesAddNoteController {

    @PreAuthorize("hasPermission(#projectId, 'org.innovateuk.ifs.project.resource.ProjectCompositeId', 'ACCESS_FINANCE_CHECKS_NOTES_SECTION')")
    @GetMapping
    public String viewNewNote(@P("projectId")@PathVariable final Long projectId,
                              @PathVariable final Long organisationId,
                              Model model,
                              UserResource loggedInUser,
                              HttpServletRequest request,
                              HttpServletResponse response) {

        partnerOrganisationRestService.getPartnerOrganisation(projectId, organisationId);
        saveOriginCookie(response, projectId, organisationId, loggedInUser.getId());
        List<Long> attachments = loadAttachmentsFromCookie(request, projectId, organisationId);
        model.addAttribute("model", populateNoteViewModel(projectId, organisationId, attachments));
        model.addAttribute(FORM_ATTR, loadForm(request, projectId, organisationId).orElse(new FinanceChecksNotesAddNoteForm()));
        return NEW_NOTE_VIEW;
    }

}