<h1>New/Edit User</h1>
		<table>
			<form:form action="save" method="post" modelAttribute="user">
			<form:hidden path="id"/>
			<tr>
				<td>Username:</td>
				<td><form:input path="username"/></td>
			</tr>
			<tr>
				<td>Password:</td>
				<td><form:password path="password"/></td>
			</tr>
			<tr>
				<td>Status:</td>
				<td>
					<form:radiobutton path="status" value="ACTIVE" checked="checked"/>ACTIVE
					<form:radiobutton path="status" value="INACTIVE" />INACTIVE	
				</td>
			</tr>
					
			<tr>
				<td>Roles:</td>
				<td>			
					<c:forEach items="${roleList}" var="role" varStatus="i">
					    <form:checkbox path="roles[${i.index}].id" value="${role.id}"/>${role.roleName}<br/>
					</c:forEach>			
				</td>
			</tr>
									
			<tr>
				<td colspan="2" align="center">
					<input type="submit" value="Save">
				</td>
			</tr>			
			</form:form>
						
		</table>

@Entity
@Table(name="Users")
public class User implements Serializable{
	@Id
	@GeneratedValue(strategy=GenerationType.AUTO)
	private int id;
	private String username;
	private String password;
	@ManyToMany
	@JoinTable(name="UsersAndRoles",
			joinColumns=@JoinColumn(name="user_id"),
			inverseJoinColumns=@JoinColumn(name="role_id"))
	private List<Role> roles;
	@Enumerated(EnumType.STRING)
	private UserStatus status;
...

@Entity
public class Role {
	@Id
	@GeneratedValue(strategy=GenerationType.AUTO)
	private int id;
	private String roleName;
	@ManyToMany(mappedBy = "roles")
	private List<User> users;
...

CREATE TABLE usersandroles
(
  user_id integer NOT NULL,
  role_id integer NOT NULL,
  CONSTRAINT usersandroles_pk PRIMARY KEY (user_id, role_id),
  CONSTRAINT usersandroles_fk FOREIGN KEY (user_id)
      REFERENCES users (id) MATCH SIMPLE
      ON UPDATE NO ACTION ON DELETE NO ACTION,
  CONSTRAINT usersandroles_fk2 FOREIGN KEY (role_id)
      REFERENCES role (id) MATCH SIMPLE
      ON UPDATE NO ACTION ON DELETE NO ACTION
)

@Entity
public class UsersAndRoles implements Serializable {
    @EmbeddedId
    private UsersAndRolesPK usersAndRolesPK;
	
}

@Embeddable
public class UsersAndRolesPK implements Serializable {

	@Column(name="user_id")
	private int userId;
	@Column(name="role_id")
	private List<Integer> roleId;
	
	public UsersAndRolesPK(){}

	public UsersAndRolesPK(int userId, List<Integer> roleId) {
		super();
		this.userId = userId;
		this.roleId = roleId;
	}

	public int getUserId() {
		return userId;
	}

	public void setUserId(int userId) {
		this.userId = userId;
	}

	public List<Integer> getRoleId() {
		return roleId;
	}

	public void setRoleId(List<Integer> roleId) {
		this.roleId = roleId;
	}
	
}