Program: 147512
Project: 147512
Buggy source:
/** 
 * This method allows to create a new comment.
 * @param comment comment as JSON object
 * @return Response with the created comment as JSON object.
 */
@POST @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) @ApiOperation(value="String_Node_Str") @ApiResponses(value={@ApiResponse(code=HttpURLConnection.HTTP_CREATED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_UNAUTHORIZED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_NOT_FOUND,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_INTERNAL_ERROR,message="String_Node_Str")}) public HttpResponse createComment(@ApiParam(value="String_Node_Str",required=true) String comment){
  DALFacade dalFacade=null;
  try {
    long userId=((UserAgent)getActiveAgent()).getId();
    String registratorErrors=bazaarService.notifyRegistrators(EnumSet.of(BazaarFunction.VALIDATION,BazaarFunction.USER_FIRST_LOGIN_HANDLING));
    if (registratorErrors != null) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,registratorErrors);
    }
    Gson gson=new Gson();
    Comment commentToCreate=gson.fromJson(comment,Comment.class);
    dalFacade=bazaarService.createConnection();
    Integer internalUserId=dalFacade.getUserIdByLAS2PeerId(userId);
    Requirement requirement=dalFacade.getRequirementById(commentToCreate.getRequirementId(),internalUserId);
    boolean authorized=new AuthorizationManager().isAuthorized(internalUserId,PrivilegeEnum.Create_COMMENT,String.valueOf(requirement.getProjectId()),dalFacade);
    if (!authorized) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.AUTHORIZATION,Localization.getInstance().getResourceBundle().getString("String_Node_Str"));
    }
    commentToCreate.setCreatorId(internalUserId);
    Vtor vtor=bazaarService.getValidators();
    vtor.validate(commentToCreate);
    if (vtor.hasViolations()) {
      ExceptionHandler.getInstance().handleViolations(vtor.getViolations());
    }
    Comment createdComment=dalFacade.createComment(commentToCreate);
    return new HttpResponse(gson.toJson(createdComment),HttpURLConnection.HTTP_CREATED);
  }
 catch (  BazaarException bex) {
    if (bex.getErrorCode() == ErrorCode.AUTHORIZATION) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_UNAUTHORIZED);
    }
 else     if (bex.getErrorCode() == ErrorCode.NOT_FOUND) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_NOT_FOUND);
    }
 else {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_INTERNAL_ERROR);
    }
  }
catch (  Exception ex) {
    BazaarException bazaarException=ExceptionHandler.getInstance().convert(ex,ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,"String_Node_Str");
    return new HttpResponse(ExceptionHandler.getInstance().toJSON(bazaarException),HttpURLConnection.HTTP_INTERNAL_ERROR);
  }
 finally {
    bazaarService.closeConnection(dalFacade);
  }
}

Fixed version (ground truth):
/** 
 * This method allows to create a new comment.
 * @param comment comment as JSON object
 * @return Response with the created comment as JSON object.
 */
@POST @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) @ApiOperation(value="String_Node_Str") @ApiResponses(value={@ApiResponse(code=HttpURLConnection.HTTP_CREATED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_UNAUTHORIZED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_NOT_FOUND,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_INTERNAL_ERROR,message="String_Node_Str")}) public HttpResponse createComment(@ApiParam(value="String_Node_Str",required=true) @ContentParam String comment){
  DALFacade dalFacade=null;
  try {
    long userId=((UserAgent)getActiveAgent()).getId();
    String registratorErrors=bazaarService.notifyRegistrators(EnumSet.of(BazaarFunction.VALIDATION,BazaarFunction.USER_FIRST_LOGIN_HANDLING));
    if (registratorErrors != null) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,registratorErrors);
    }
    Gson gson=new Gson();
    Comment commentToCreate=gson.fromJson(comment,Comment.class);
    dalFacade=bazaarService.createConnection();
    Integer internalUserId=dalFacade.getUserIdByLAS2PeerId(userId);
    Requirement requirement=dalFacade.getRequirementById(commentToCreate.getRequirementId(),internalUserId);
    boolean authorized=new AuthorizationManager().isAuthorized(internalUserId,PrivilegeEnum.Create_COMMENT,String.valueOf(requirement.getProjectId()),dalFacade);
    if (!authorized) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.AUTHORIZATION,Localization.getInstance().getResourceBundle().getString("String_Node_Str"));
    }
    commentToCreate.setCreatorId(internalUserId);
    Vtor vtor=bazaarService.getValidators();
    vtor.validate(commentToCreate);
    if (vtor.hasViolations()) {
      ExceptionHandler.getInstance().handleViolations(vtor.getViolations());
    }
    Comment createdComment=dalFacade.createComment(commentToCreate);
    return new HttpResponse(gson.toJson(createdComment),HttpURLConnection.HTTP_CREATED);
  }
 catch (  BazaarException bex) {
    if (bex.getErrorCode() == ErrorCode.AUTHORIZATION) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_UNAUTHORIZED);
    }
 else     if (bex.getErrorCode() == ErrorCode.NOT_FOUND) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_NOT_FOUND);
    }
 else {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_INTERNAL_ERROR);
    }
  }
catch (  Exception ex) {
    BazaarException bazaarException=ExceptionHandler.getInstance().convert(ex,ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,"String_Node_Str");
    return new HttpResponse(ExceptionHandler.getInstance().toJSON(bazaarException),HttpURLConnection.HTTP_INTERNAL_ERROR);
  }
 finally {
    bazaarService.closeConnection(dalFacade);
  }
}