@Entity
@Table(name = "SECURE_USER")
@Cache(usage = CacheConcurrencyStrategy.NONSTRICT_READ_WRITE)
@NamedQuery(
      name="findByIdWithNonEmptyCategories",
      cacheable=true,
      cacheRegion="userCategories",
      readOnly=true,
      query=
         "from AdminUser u " +
         "left join fetch u.categoryPermissions p " +
         "left join fetch p.category cat " +
         "left join fetch cat.items item " +
         "left join fetch cat.childCategories child " +
         "left join fetch child.items item2 " +
         "where u.id = :id " +
         "and p.permissionSet.isReadable = true " +
         "and cat.parentCategory is null " +
         "and (" +
         "   (cat.childCategories is not empty) " +
         "   or " +
         "   (cat.items is not empty) " +
         ") " +
         "and child.items is not empty")
public class AdminUser extends BasePersistentObject implements Serializable {

   @Id
   @GeneratedValue(strategy = GenerationType.AUTO, generator="SECURE_USER_ID_GEN")
   @SequenceGenerator(name="SECURE_USER_ID_GEN", sequenceName="SECURE_USER_ID")
   @Column(name = "SECURE_USER_ID")
   private Long id;

   @Cache(usage = CacheConcurrencyStrategy.NONSTRICT_READ_WRITE)
   @OneToMany(mappedBy = "adminUser", cascade=CascadeType.ALL)
   @Sort(type=SortType.NATURAL)
   private SortedSet<CategoryPermission> categoryPermissions;