I'm embarrassed to even post this, but I'm pulling my hair out.  This code is retuning null for the doc, and a doc with the key is clearly in the first sorted column of the view.  The view does not return null, so I definitely have a handle on that.  It's gotta be something security-related.  Can a second set of eyes spot it?  This is in the beforeRenderResponse event if that helps.  It works fine in client, but on web (logging in as same user), it doesn't get a handle on the doc.  The client will also return the view name, but on the web even that is null.  Very weird!

var exCon = facesContext.getExternalContext();

var request = exCon.getRequest(); // This is the actual HTTP servlet request...
var paramValue = request.getParameter("offer");
sessionScope.offer = paramValue;
var paramValue = request.getParameter("invite");
sessionScope.invite = paramValue;

// get handle on invite
var v:NotesView = database.getView("(Lookup - Invitations by UNID)");

sessionScope.status = v.getName();  // this returns the view name in client, but null on web
var doc:NotesDocument = v.getFirstDocument();  // this fails to get a handle on one of the 5 docs in the web, but works in client

if (v == null){
sessionScope.view = "view is null"
}else{
sessionScope.view = "view is not null"
}
if (doc == null){
sessionScope.doc = "doc is null"
}else{
sessionScope.doc = "doc is not null";
}