The confused deputy problem and the problem of not guaranteeing only one person has access are resolved by what?
It has also been shown that the promise of ACLs of giving access to an object to only one person can never be guaranteed in practice.