updated some of the comments
Created crude policy for defining user permssions