forgot to grant permissions in the policy file