I belive you want to remove the insert=false and update=false attributes from your Product and Order mappings:
Code:
<many-to-one name="product" class="Product">
<column name="productId" />
</many-to-one>
<many-to-one name="order" class="Order">
<column name="orderId" />
</many-to-one>
You are telling Hibernate to not set those values when you add an OrderLine, so it has nothing from which to make the composite-id.
I am no expert on composite-ids, though, so could be totally off base.
-----
Eric
Helpful? Hit me with a credit!