create table User (
  user_id long,
  username varchar(20),
  password varchar(50),
  primary key (user_id),
);

create table UserRole (
  user_id long,
  app_name varchar(20),
  role_name varchar(20),
  primary key (user_id, app_name, role_name),
);

class User {
  private long user_id;
  private String username;
  private String password;
  private Set roles;  // set of role names (string)
}

<hibernate-mapping auto-import="true">
   <class name="User" table="User" dynamic-update="true">
      <id name="id" column="user_id" type="long" unsaved-value="0">
         <generator class="increment"/>
      </id>
      <version name="version" column="version" type="integer" unsaved-value="negative"/>
      <property name="username" column="username" unique="true"/>
      <property name="password" column="password"/>
       <set name="roles" table="UserRole" [color=red]where="app_name='APP1'"[/color] cascade="delete" lazy="false">
         <key column="user_id" not-null="true"/>
         <element column="role_name" type="string"/>
          [color=red]<sql-insert>insert into UserRole (user_id, app_name, role_name) values (?, 'APP1', ?)</sql-insert>[/color]
          [color=red]<sql-delete>delete from UserRole where user_id = ? and app_name = 'APP1' and role_name = ?</sql-delete>[/color]
          [color=red]<sql-delete-all>delete from TestUserRole where user_id = ? and app_name = 'TESTPLAN'</sql-delete-all>[/color]
       </set>         
   </class>
</hibernate-mapping>