Use policy to block users' access to URL categories