this is the policy that worked for me