[webui][api] Test the attrib policy