query.append("companyId = ?");
query.append(" ");
query.append("ORDER BY ");
query.append("createDate DESC");
Query q = session.createQuery(query.toString());
int queryPos = 0;
q.setString(queryPos++, portletId);
q.setString(queryPos++, companyId);
Iterator itr = q.list().iterator();