Into the woods (things you need to customize)
There are some specific things that you'll need to customize in the database where you want to include this functionality. In addition to some of the variables that you'll have to set (which I've commented on in the code and have placed "-- MODIFY…" messages above), there are certain ways you need to set up your system in order for this Access List Management System to work as advertised.

Set a group naming standard
People with different levels of access to your database should be placed in separate groups. For example, have an editor group for editors, an author group for authors, and a readers group for readers. Furthermore, set up some kind of naming convention. This way, you can easily calculate or lookup the name of your group based on the database title or some other standard. You could also put the names of the groups who have the different levels of access on a database profile form and look them up as your agent runs.

Customize the SetGlobalVariables subs
The values in this sub in each agent need to be customized based on the locations of your key databases and variable values.

Change the references to lookup your people information
Our intranet has a customized database that maintains information about our employees. You'll need to change the field names in the "HTMLReport" sub to reference whatever internal person information database you want to reference. Don't forget to change the database reference as well. In our specific case, if there was no entry for somebody in our person information database, I looked for the person document in the Domino server directory. If I did not find either type of document I printed a "No information about John Doe is available" message.

Set up an HTML reference database
In order to make it easier for me and my agent to create HTML pages on the fly, I created a Function called GetHTML() and an HTML Library database (included in the sample download) that I use to store and retrieve code for such things as headers and footers. The GetHTML() function is in the ACL Agent Script Library and will require you to modify the path for the HTML Library based on where you place that database on your server. Or you can just remove those functions and put in your own header and footer code directly into the agent.

Get and grant the proper level of access
First of all, the signer of this agent (whether it be you or the server) has to have access to modify the group documents in the Domino directory. Next, the way the agent is set up, it will check the roles of the person who is trying to use the agent for the existence of a role called "Managing Editor." If the user does not have this role, they will receive an error message stating that they do not have the rights to modify the ACL for the database in question. See the security issues section for more details.

Slaying the giant (dealing with security concerns)
As always, whenever you are playing with the access list for databases, you have to be very mindful of security concerns. When I was first working on the database, my goal was to make it work just like I wanted it to. Once that was done, I immediately focused my attention on the security issues such an agent raised.