Abstract join criteria.
Find a role by user criteria and find a permission by role criteria.