Added RBAC policy for checking read permissions from cache