Ep14 User authentication and restricting access through policies