Spring Security + Hibernate (Reescrever UserDetails)

package util.security;
 
import org.acegisecurity.userdetails.UserDetails;
import org.acegisecurity.userdetails.UsernameNotFoundException;
import org.acegisecurity.userdetails.jdbc.JdbcDaoImpl;
import org.springframework.dao.DataAccessException;
 
public class AuthenticationJdbcDaoImpl extends JdbcDaoImpl {   
    private String[] userInfoObjectTypes;    
    private static final SessionFactory sessionFactory = new AnnotationConfiguration().configure().buildSessionFactory();
 
    @Override
    public UserDetails loadUserByUsername(String username) {
	try {
            UserDetails user = super.loadUserByUsername(username);
	    Session session = sessionFactory.openSession();  
	    for (int i = 0; i < userInfoObjects.length; i++) {
		Object userInfo = session.createQuery("from " + userInfoObjects[i] + " where username = '" + username + "'").uniqueResult();
		if(userInfo != null)
		    return new CustomUser(user.getUsername(), user.getPassword(), user.isEnabled(), user.getAuthorities(), userInfo);
	    }
	    return new CustomUser(user.getUsername(), user.getPassword(), user.isEnabled(), user.getAuthorities());         
	} catch (UsernameNotFoundException ex1) {
	    ex1.printStackTrace();
	    throw ex1;
	} catch (DataAccessException ex2) {
	    ex2.printStackTrace();
	    throw ex2;
	}
    }
 
    public void setUserInfoObjectTypes(String[] userInfoObjectTypes) {
	this.userInfoObjectTypes = userInfoObjectTypes;
    }
}