policies.php for the rails port