draft of access policy and forms