#vulnerable code 
                             public void hideConfidentialFields() {
		
		password = null; // JsonIgnore didn't work because of JsonIgnore
		//verificationCode = null;
		//forgotPasswordCode = null;
		
		if (!hasPermission(LemonUtils.getSpringUser(), Permission.EDIT))
			email = null;
		
		log.debug("Hid confidential fields for user: " + this);
	} 
                            #location 7 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                             public void hideConfidentialFields() {
		
		password = null; // JsonIgnore didn't work because of JsonIgnore
		//verificationCode = null;
		//forgotPasswordCode = null;
		
		if (!hasPermission(LemonUtils.currentUser(), Permission.EDIT))
			email = null;
		
		log.debug("Hid confidential fields for user: " + this);
	}