diff --git a/services/web/app/coffee/managers/SecurityManager.coffee b/services/web/app/coffee/managers/SecurityManager.coffee
index 1f75e201ea..790748567b 100644
--- a/services/web/app/coffee/managers/SecurityManager.coffee
+++ b/services/web/app/coffee/managers/SecurityManager.coffee
@@ -169,6 +169,9 @@ module.exports = SecurityManager =
 
 getRequestUserAndProject = (req, res, options, callback)->
 	project_id = req.params.Project_id
+	if !project_id?
+		logger.log project_id:project_id, options:options, url:req?.url, "no project_id trying to getRequestUserAndProject"
+		return res.send 422
 	Project.findById project_id, 'name owner_ref readOnly_refs collaberator_refs publicAccesLevel archived', (err, project)=>
 		if err?
 			logger.err err:err, "error getting project for security check"