L>.add(Restrictions.or(Restrictions.in("roles.name", userroles), Restrictions.isEmpty("roles"))
L>

Criteria c = session.createCriteria(User.class).createAlias("roles", "r").add(Expression.in("r.name", userroles));