1. A method, comprising: identifying, by a system comprising one or more computer nodes, a plurality of running software components on a cluster of two or more computers, the plurality of components comprising one or more first components managing a dataset stored in the cluster, the first components exposing data of the dataset, the plurality of components comprising one or more second components (i) managing, directly or indirectly, the first components, and (ii) exposing data of the dataset exposed by the first components; identifying, by the system, one or more security policies affecting any one of the dataset, the one or more first components, and the one or more second components; identifying inconsistent security policies from the one or more security policies, wherein the inconsistent security policies are policies that allow different scopes of user access to the data of the dataset depending on whether the user access is (i) directly to the dataset, (ii) directly to any of the one or more first components, or (iii) directly to any of the one or more second components; generating, by the system, a specification of one or more actions to rectify inconsistences in the inconsistent security policies; and performing the one or more actions to rectify inconsistences in the inconsistent security policies.