1. An electronic document generating apparatus comprising: a generating processor that merges variable data with a source electronic document to generate an electronic document, the source document being a form to provide a format for the generated electronic document; and a setting processor that establishes security policy information including identification information and defining an operation right to the generated electronic document, on the basis of security policy information associated with the source electronic document and defining an operation right to the source electronic document, and associates the established security policy information with the generated electronic document by adding the identification information included in the established security policy information to the generated electronic document; said setting processor registering, independently of the generated electronic document, the established security policy information in a policy management sever.