Use the policy.yaml file to define additional access controls that apply to the Rating service:
policy.yaml
../../../_static/policy.yaml.sample