modify user policy