Does it occur even for only one client?
rather than declare a return type of java.lang.Object, i think you rather want to declare the local interface for the bean. this may or may not have anything to do with your particular bug, however.
In many RDBMs "USER" is a reserved word and thus not available as a table name. Don't know about hsqldb though. YMMV.