select distinct permission from org.alfresco.repo.domain.hibernate.DbPermissionImpl as permission where permission.typeQname = :permissionTypeQName and permission.name = :permissionName select ace from org.alfresco.repo.domain.hibernate.DbAccessControlEntryImpl as ace where ace.authority.recipient = :authorityRecipient