[Authz]: ranger policies for URLs

[nilan3]

Currently we have to disable spark.sql.runSQLOnFiles system-wide and restrict end-users from querying files directly. Table need to be defined in the metastore and ranger policies based on tables.
Can we add a feature to allow URL based policies and allow users to authorized for querying directly on files?

[nilan3]

Originally posted by @yaooqinn in #5166 (comment)