fop access policy