java - hibernate design issue -

have custom filter querying database.
api layer build filter,send dao layer , dao execute filter (filter.tocreteia()) , return list of results.

public interface ifilter {     creteria tocriteria(); }  

i want make dao api filter + securityfilter in every method.

list getall(ifilter filter, ifilter security); //each filter creteria in end 

i end inside dao 2 creterias: regular filter , security filter.
how can render 2 creteias returning 1 list of results?

or, think should use 1 filter , in api layer add security content it?

unless want go interceptor approach (e.g., have securityinterceptor/proxy class transparently modifies criteria) think nicer design have 2 separate filters.

note don't see possible join 2 detachedcriteria objects together. although can have routine based on 2 ifilter objects returns single detachedcriteria based e.g. on restrictions.and(criterion1, criterion2).