in your fine grain access control procedures you must give the owner, creater and invoker of the proc doing a refresh a null policy