Added proper policy_attributes method for controller