You are not using the correct naming convention to call your policy. Here is an example of what it should look like. strapi-policy-examples/src/api/item/routes/item.js at 5319d930bbfb51681b5cb26fc0a22d432dd8cd01 · PaulBratslavsky/strapi-policy-examples · GitHub