strapi.io, learn how to override and expand the users-permissions extension, use the custom global policy accessForbiddenByRole, create a customized API with new controllers, services, and middleware, and add custom routes to the API using Strapi v4.