query.append("groupId = ?");
query.append(" AND ");
query.append("companyId = ?");
query.append(" ");
Query q = session.createQuery(query.toString());
int queryPos = 0;
q.setString(queryPos++, groupId);
q.setString(queryPos++, companyId);
Iterator itr = q.list().iterator();