igured <code>deny-all</code> policy
is working as intended, and Istio doesn&rsquo;t have any rules that allow any access to
workloads in the mesh.</p></li><li><p>Run the following command to create a <code>productpage-viewer</code> policy to allow access
with <code>GET</code> method to the <code>productpage</code> workload. The policy does not set the <code>from</code>
field in the <code>rules</code> which means all sources are allowed, effectively allowing
all users and workloads:</p><pre><code class=langu