query.append("ORDER BY ");
query.append("firstName ASC").append(", ");
query.append("middleName ASC").append(", ");
query.append("lastName ASC");
Query q = session.createQuery(query.toString());
int queryPos = 0;
q.setString(queryPos++, companyId);
q.setString(queryPos++, userId);
Iterator itr = q.list().iterator();