Sorry I feel very headachy to understand how to define access policy in zmodel when I look at the doc, will there be any further improvement on this?