Firstly, the default policy is always to deny access.

• 首先，缺省的策略总是拒绝任何访问权限的。