Program: 147516
Project: 147516
Buggy source:
/** 
 * This method allows to create a new project.
 * @param project project as a JSON object
 * @return Response with the created project as a JSON object.
 */
@POST @Path("String_Node_Str") @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) @ApiOperation(value="String_Node_Str") @ApiResponses(value={@ApiResponse(code=HttpURLConnection.HTTP_CREATED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_UNAUTHORIZED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_INTERNAL_ERROR,message="String_Node_Str")}) public HttpResponse createProject(@ApiParam(value="String_Node_Str",required=true) String project){
  DALFacade dalFacade=null;
  try {
    String registratorErrors=bazaarService.notifyRegistrators(EnumSet.of(BazaarFunction.VALIDATION,BazaarFunction.USER_FIRST_LOGIN_HANDLING));
    if (registratorErrors != null) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,registratorErrors);
    }
    long userId=((UserAgent)getActiveAgent()).getId();
    Gson gson=new Gson();
    Project projectToCreate=gson.fromJson(project,Project.class);
    Vtor vtor=bazaarService.getValidators();
    vtor.validate(projectToCreate);
    if (vtor.hasViolations())     ExceptionHandler.getInstance().handleViolations(vtor.getViolations());
    dalFacade=bazaarService.createConnection();
    Integer internalUserId=dalFacade.getUserIdByLAS2PeerId(userId);
    boolean authorized=new AuthorizationManager().isAuthorized(internalUserId,PrivilegeEnum.Create_PROJECT,dalFacade);
    if (!authorized) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.AUTHORIZATION,Localization.getInstance().getResourceBundle().getString("String_Node_Str"));
    }
    projectToCreate.setLeaderId(internalUserId);
    Project createdProject=dalFacade.createProject(projectToCreate);
    return new HttpResponse(gson.toJson(createdProject),HttpURLConnection.HTTP_CREATED);
  }
 catch (  BazaarException bex) {
    if (bex.getErrorCode() == ErrorCode.AUTHORIZATION) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_UNAUTHORIZED);
    }
 else {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_INTERNAL_ERROR);
    }
  }
catch (  Exception ex) {
    BazaarException bazaarException=ExceptionHandler.getInstance().convert(ex,ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,"String_Node_Str");
    return new HttpResponse(ExceptionHandler.getInstance().toJSON(bazaarException),HttpURLConnection.HTTP_INTERNAL_ERROR);
  }
 finally {
    bazaarService.closeConnection(dalFacade);
  }
}

Fixed version (ground truth):
/** 
 * This method allows to create a new project.
 * @param project project as a JSON object
 * @return Response with the created project as a JSON object.
 */
@POST @Path("String_Node_Str") @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) @ApiOperation(value="String_Node_Str") @ApiResponses(value={@ApiResponse(code=HttpURLConnection.HTTP_CREATED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_UNAUTHORIZED,message="String_Node_Str"),@ApiResponse(code=HttpURLConnection.HTTP_INTERNAL_ERROR,message="String_Node_Str")}) public HttpResponse createProject(@ApiParam(value="String_Node_Str",required=true) @ContentParam String project){
  DALFacade dalFacade=null;
  try {
    String registratorErrors=bazaarService.notifyRegistrators(EnumSet.of(BazaarFunction.VALIDATION,BazaarFunction.USER_FIRST_LOGIN_HANDLING));
    if (registratorErrors != null) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,registratorErrors);
    }
    long userId=((UserAgent)getActiveAgent()).getId();
    Gson gson=new Gson();
    Project projectToCreate=gson.fromJson(project,Project.class);
    Vtor vtor=bazaarService.getValidators();
    vtor.validate(projectToCreate);
    if (vtor.hasViolations())     ExceptionHandler.getInstance().handleViolations(vtor.getViolations());
    dalFacade=bazaarService.createConnection();
    Integer internalUserId=dalFacade.getUserIdByLAS2PeerId(userId);
    boolean authorized=new AuthorizationManager().isAuthorized(internalUserId,PrivilegeEnum.Create_PROJECT,dalFacade);
    if (!authorized) {
      ExceptionHandler.getInstance().throwException(ExceptionLocation.BAZAARSERVICE,ErrorCode.AUTHORIZATION,Localization.getInstance().getResourceBundle().getString("String_Node_Str"));
    }
    projectToCreate.setLeaderId(internalUserId);
    Project createdProject=dalFacade.createProject(projectToCreate);
    return new HttpResponse(gson.toJson(createdProject),HttpURLConnection.HTTP_CREATED);
  }
 catch (  BazaarException bex) {
    if (bex.getErrorCode() == ErrorCode.AUTHORIZATION) {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_UNAUTHORIZED);
    }
 else {
      return new HttpResponse(ExceptionHandler.getInstance().toJSON(bex),HttpURLConnection.HTTP_INTERNAL_ERROR);
    }
  }
catch (  Exception ex) {
    BazaarException bazaarException=ExceptionHandler.getInstance().convert(ex,ExceptionLocation.BAZAARSERVICE,ErrorCode.UNKNOWN,"String_Node_Str");
    return new HttpResponse(ExceptionHandler.getInstance().toJSON(bazaarException),HttpURLConnection.HTTP_INTERNAL_ERROR);
  }
 finally {
    bazaarService.closeConnection(dalFacade);
  }
}