Dear hadoop2: I want create external iceberg table with hive metastore mange metadata layer and data file are stored at hdfs. If I grant hdfs ACL for group user A is 000 (not permission to read directly) but I grant permission on ranger for group user A can use spark to read iceberg table on column A, B  and masking column C. From my approach, does that avoid user read data file directly from hdfs by using spark and just read masking information at column C? Thank you! ... View more