I have few questions on granting access prvilege on hdfs uri as part of sentry integration (hive,hdfs).

1) Is it possible to grant read only privilege on hdfs uri? ( when i do grant select on hdfs uri it is giving all privilege (*) on the uri). 

2) If i want to give full permission for a hive db on the hdfs uri do i need to specify  * at the end so that all the underlying tables will also have that permission ( grant all on uri 'hdfs://namespace/production/test_db/* to role ...) or is it ok if i grant only on the db path ( grant all on uri 'hdfs://namespace/production/test_db to role ... ), so that tables created under will also inherit this privileges?