Change policy #6 at authorization_rules_collection