adding canRead policy to allow hiding private documentation