t.user_id as userId t.role_id as roleId, t.created as created select distinct b.id user_id from system_user_role a left join system_user b on a.user_id = b.id left join com_person c on b.person_id = c.id where c.id = #{personId} select distinct a.user_id id from system_user_role a left join system_user b on a.user_id = b.id left join com_person c on b.person_id = c.id where c.cert_id = #{certId} and a.role_id=#{roleId}