diff --git a/app/static/main.js b/app/static/main.js
index 4f1f58b..05374e4 100644
--- a/app/static/main.js
+++ b/app/static/main.js
@@ -101,7 +101,7 @@ function uploadACL(obj) {
   });
 
   $.ajax({
-    url: "/policy/upload",
+    url: "policy/upload",
     type: "POST",
     xhrFields: {
       withCredentials: true,
diff --git a/app/templates/policy.html b/app/templates/policy.html
index 438d552..2bba5d8 100644
--- a/app/templates/policy.html
+++ b/app/templates/policy.html
@@ -17,8 +17,8 @@
         {{policy.updatedAt | htime_dt }}
       </span>
       <div>
-        <button type="button" class="btn btn-outline-primary btn-sm plain"><a class="plain" href="/policy/view" target="_blank">View</a></button>
-        <button type="button" class="btn btn-outline-primary btn-sm plain"><a class="plain" href="/policy/download">Download</a></button>
+        <button type="button" class="btn btn-outline-primary btn-sm plain"><a class="plain" href="{{ url_for('main.policy', action='view') }}" target="_blank">View</a></button>
+        <button type="button" class="btn btn-outline-primary btn-sm plain"><a class="plain" href="{{ url_for('main.policy', action='download') }}">Download</a></button>
         <button type="button" class="btn btn-outline-primary btn-sm plain" data-toggle="modal" data-target="#uploadACL">Upload</button>
       </div>
     </div>
diff --git a/app/views/main.py b/app/views/main.py
index 6271af0..1b387f2 100644
--- a/app/views/main.py
+++ b/app/views/main.py
@@ -136,7 +136,6 @@ def routes():
 @main_blueprint.route('/policy/<action>', methods=['GET'])
 @auth.authorize_admins('default')
 def policy(action):
-    log.debug(f"action: {action}")
     policy = Policy().get()
     if action == "view":
         return policy.json