>But it turns out ACLs don't really enforce this: I can always set up a proxy server that has my credentials and provides some API to another user, hence delega

>But it turns out ACLs don't really enforce this: I can always set up a proxy server that has my credentials and provides some API to another user, hence delegating my authority with whatever granularity I wish. Or what often happens in practice: users just share their login credentials to delegate access. But then this comes with the problem that it's hard to track who did what on an account, revoke access to specific people, or prevent "delegated" users from revoking access from others including the original owner by changing the password.