curl -X PATCH 'https://api.example.com/resource-policies/policy_0190a1b2-c3d4-7e5f-8a9b-0c1d2e3f4a5b' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "actions": ["read", "update", "delete"],
    "priority": 75
  }'

{
  "id": "policy_0190a1b2-c3d4-7e5f-8a9b-0c1d2e3f4a5b",
  "scopeId": "scope_org",
  "name": "Finance Team Access",
  "description": "Allow finance team to read finance documents",
  "target": {
    "kind": "collection",
    "collectionId": "collection_finance_docs"
  },
  "actions": ["read", "update", "delete"],
  "effect": "allow",
  "priority": 75,
  "subjectCondition": {
    "==": [{"var": "subject.meta.department"}, "finance"]
  },
  "createdAt": "2024-01-15T10:30:00Z"
}