inline are policies that you attach directly to the user