use attribute controller to update policies