*8148* refactor workflow stage access policy