refine policy rules

Created by: wansir

Signed-off-by: hongming talonwan@yunify.com

fix:

https://github.com/kubesphere/kubesphere/issues/1090 https://github.com/kubesphere/kubesphere/issues/1090