added scope to post_policy and its functionality to the controller