Policy and acl design