def post(self, instance, requester_user):
        """
        Create a new policy.
        Handles requests:
            POST /policies/
        """
        permission_type = PermissionType.POLICY_CREATE
        rbac_utils = get_rbac_backend().get_utils_class()
        rbac_utils.assert_user_has_resource_api_permission(
            user_db=requester_user,
            resource_api=instance,
            permission_type=permission_type,
        )

        op = "POST /policies/"

        db_model = self.model.to_model(instance)
        LOG.debug("%s verified object: %s", op, db_model)

        db_model = self.access.add_or_update(db_model)

        LOG.debug("%s created object: %s", op, db_model)
        LOG.audit(
            "Policy created. Policy.id=%s" % (db_model.id),
            extra={"policy_db": db_model},
        )

        exec_result = self.model.from_model(db_model)

        return Response(json=exec_result, status=http_client.CREATED)

        Create a new policy.
        Handles requests:
            POST /policies/
        
st2api/st2api/controllers/v1/policies.py