fixes #1 (policies.ensureAccessRights)