Define the policies correctly