select distinct permission from org.alfresco.repo.domain.hibernate.DbPermissionImpl as permission where permission.typeQname = :permissionTypeQName and permission.name = :permissionName select ace from org.alfresco.repo.domain.hibernate.DbAccessControlEntryImpl as ace where ace.authority.recipient = :authorityRecipient select ace, acl, node from org.alfresco.repo.domain.hibernate.NodeImpl as node join node.accessControlList as acl join acl.entries as ace where ace.authority.recipient = :authorityRecipient select ace, acl, node from org.alfresco.repo.domain.hibernate.NodeImpl as node join node.accessControlList as acl join acl.entries as ace where ace.authority.recipient = :authorityRecipient and ace.allowed = :allow and ace.permission.name = :permissionName and ace.permission.typeQname = :permissionTypeQname select entry from org.alfresco.repo.domain.hibernate.DbAccessControlEntryImpl entry where entry.permission.typeQname = :oldTypeQName and entry.permission.name = :oldName