add pinch policy and adjust permissions to jobs review