First of all, since the method uses an agent that passes its arguments in the query string, I knew that in theory, anyone who had access to the database and knew the URL of the agent and the proper format for the arguments could conceivably add somebody to the database. The agent is signed by me. If a URL in the proper format was submitted, then somebody could be either added to or deleted from an access group. As of version 4.6, there is the possibility to check an agent property for Web Access to "Run Agent as Web user." But that would not work since the people who would be maintaining the lists did not have and never would have access to modify group documents in the Domino server address book. So they needed to run the agent with my authority.

Therefore, I knew I needed to find a way to limit access to who could run this agent based on a role. That's where the CheckRole(Byval roleName As String) function comes into play. This function uses an Evaluate function to access the current user's list of roles and check it for the existence of a role called "Managing Editor." If they do not have this role, it will skip over all of the code and go straight to a couple of lines that print an error message. This provides me with an easy way to control access to who can run any of these agents.

Fee-fi-fo-fum (conclusion)
I hope you've enjoyed reading about the Access List Management System that has grown from my magic beans. It definitely took a lot of water but it was very much worth it. Not only is the administration of access lists for databases a lot easier, but I got a lot of valuable experience by creating this system. I know that the next Domino beanstalk I encounter is going to be a little easier climb because of what I learned from creating this system. And I hope I've given you some useful ideas and/or made some of your projects a little easier as well. I always love to get email from people who have found the articles I've written and the example databases I provide useful. Please feel free to email me with any success stories or questions at dan.velasco@adecco.com.

Contributing Editor Dan Velasco is a Lotus Notes/Domino Developer for the Worldwide Sales & Marketing Department at Adecco in Redwood City, CA. He is also an R4 and R5 CLP Principal Application Developer and a R4 Principal System Administrator. You can reach him via email at dan.velasco@adecco.com or on the Web at http://dan.velasco.com.