change protection policy