basic accesspolicy and decode