I don\'t know if it\'s possible, but, could I make something like a default policy for all my GET actions in my webApi, so they require a especific role, one for "read&