updated policy for Pundit example