Refactoring of access policies