Permission policy
ack-grep configuration