fix a bug when check user policy