Access Control Policies and Languages in Open Environments