Add test cases about access-policy