<?xml version="1.0"?>
<!DOCTYPE hibernate-mapping PUBLIC "-//Hibernate/Hibernate Mapping DTD 3.0//EN"
"http://hibernate.sourceforge.net/hibernate-mapping-3.0.dtd">

<hibernate-mapping>
   <class name="domain.Document"
      table="document">
      <id name="id" column="id" type="integer">
         <generator class="sequence">
            <param name="sequence">Document_id_SEQ</param>
         </generator>
      </id>

      <many-to-one name="createdBy" column="createdBy" class="domain.User" not-null="true"/>
      ...
         
      <filter name="limitDocumentsByUser"
         condition="(createdBy = :userId)" />
                     

   </class>
   
   <filter-def name="limitDocumentsByUser" >
      <filter-param name="userId" type="int" />
   </filter-def>
   
</hibernate-mapping>

...
private static final String User_Permission = "limitDocumentsByUser";
...
Filter filter = session.enableFilter(User_Permission);
filter.setParameter("userId", user.getId());

...
SQLQuery q = session.createSQLQuery("SELECT {d.*} FROM document d");
q.addEntity("d", Document.class);

return q.list();