Completed user access policies and added a spec for them.
Merge 74154042-user-model-access-policies to develop

[Delivers #74154042]