Major Description
It would be good to support variables in resources and users.
E.g.
HDFS Resource = /home/$user
or
Table Resource = ${user}_*
Users allowed = $user
Where $user will be expanded to the current user.
I think, resource substitution will be easy. For permission, we can use key word like we use for all users group="public". We can use key word like "USER" or something like that.