code: public static void checkQuery(Query<?> query, Set<String> whitelist,
                                    Set<String> blacklist, InjectionManager manager) {
          ResourceInfo resource = manager.getInstance(ResourceInfo.class);
          Class<?> rc = resource.getResourceClass();
          Set<String> wl = null, bl = null;
          if (rc != null) {
              Filter filter = rc.getAnnotation(Filter.class);
  
              if (filter != null) {
                  if (filter.whitelist().length > 0) {
                      wl = Sets.newLinkedHashSet();
                      Collections.addAll(wl, filter.whitelist());
                  }
                  if (filter.blacklist().length > 0) {
                      bl = Sets.newLinkedHashSet();
                      Collections.addAll(bl, filter.blacklist());
                  }
              }
          }
  
          if (whitelist != null) {
              if (wl == null) {
                  wl = Sets.newLinkedHashSet();
              }
              wl.addAll(whitelist);
          }
  
          if (blacklist != null) {
              if (bl == null) {
                  bl = Sets.newLinkedHashSet();
              }
              bl.addAll(blacklist);
          }
          checkQuery((SpiQuery) query, wl, bl, manager.getInstance(Application.Mode.class).isProd());
      }
docs: <p>checkQuery.</p>
  
  @param query     a {@link io.ebean.Query} object.
  @param whitelist a {@link java.util.Set} object.
  @param blacklist a {@link java.util.Set} object.
  @param manager   a {@link InjectionManager} object.