This is a small error in SelectProjectWorkflowSchemeStep2 where a has permission check is being performed.

Specifically:

        if (hasPermission())
        {
            return getRedirect("ViewProject.jspa?pid=" + getProjectId());
        }

We should simply redirect and rely on ViewProject to manage the session and permission check