#fixed code
                             public static Boolean isProjectPermsPassByProjectId(Integer projectId)
	{
		List<Integer> projectIDList = ShiroUtils.getProjectIdForRoles();
    	
    	Boolean result = false;  	
    	/*超级管理员权限*/
    	if("admin".equals(ShiroUtils.getLoginName())){
    		return true;
    	}
    	
    	for(Integer pId:projectIDList){
    		if(projectId==pId){
    			result = true;
    			break;
    		}   		
    	}
    	
    	if(!result){
    		log.warn("项目访问权限不通过，被访项目ID:{},用户项目权限列表：{}",projectId,JSON.toJSONString(projectIDList));
    	}
    	
	    return result;
	}
#vulnerable code 
                             public static Boolean isProjectPermsPassByProjectId(Integer projectId)
	{
		List<Integer> projectIDList = ShiroUtils.getSysUser().getProjectIdForRoles();
    	
    	Boolean result = false;  	
    	/*超级管理员权限*/
    	if("admin".equals(ShiroUtils.getLoginName())){
    		return true;
    	}
    	
    	for(Integer pId:projectIDList){
    		if(projectId==pId){
    			result = true;
    			break;
    		}   		
    	}
    	
	    return result;
	} 
                            #location 3 
                            #vulnerability type NULL_DEREFERENCE