added data_product_management to deny everything policy