modified policy to add user page