implement new access policy