[SO] Create Authorization Policies for SO