add tests for policies and roles