How does Policy.yaml work?

Using Neos & Flow
1

Hi guys,

I have defined a role to access only the childs of one node. But I cant see anything in the site navigation. I think I misunderstood something…

This is my simple Policy.yaml

privilegeTargets:
  'TYPO3\TYPO3CR\Security\Authorization\Privilege\Node\EditNodePrivilege':
    'XY.xy:EditAllNodes':
      matcher: 'TRUE'
    'XY.xy:EditLorem':
      matcher: 'isDescendantNodeOf("9209ac88-0676-465a-b142-223655d679e9")'
  'TYPO3\Neos\Security\Authorization\Privilege\NodeTreePrivilege':
    'XY.xy:ShowAllNodes':
      matcher: 'TRUE'
    'XY.xy:ShowLorem':
      matcher: 'isDescendantNodeOf("9209ac88-0676-465a-b142-223655d679e9")'
  #'TYPO3\TYPO3CR\Security\Authorization\Privilege\Node\RemoveNodePrivilege':

roles:
  'TYPO3.Neos:Editor':
    privileges:
      -
        privilegeTarget: 'XY.xy:EditAllNodes'
        permission: GRANT
  'XY.xy:LoremEditor':
    parentRoles: ['TYPO3.Neos:RestrictedEditor']
    privileges:
      -
        privilegeTarget: 'XY.xy:EditLorem'
        permission: GRANT
      -
        privilegeTarget: 'XY.xy:ShowLorem'
        permission: GRANT