diff --git a/etc/policy.json b/etc/policy.json
new file mode 100644
index 000000000..726fb02c6
--- /dev/null
+++ b/etc/policy.json
@@ -0,0 +1,4 @@
+{
+    "context_is_admin":  "role:admin",
+    "deny_everybody": "!",
+}