Test policy in api.