refactored policy works with all user permission levels

Chris - I tested this one as well. Works with all 3 different user permissions (admin, moderator and normal).
Extra empty line detected at body end.