Permission and Authorization in Policies for Virtual Communities of Agents