add a security policy for adding case item

add a security policy in correspondence where we can't add a caseitem to a case
task is done when a selenium check it