Permission and authorization in policies for virtual communities of agents