Update test cases: access policy