Using policies and guard to protect user pages