I want to know the answer to the following question:
What must designers of systems that are ACL based do?
All the background I'm provided with is that "Using ACLs to confine programs has been proven to be insecure in many situations, such as if the host computer can be tricked into indirectly allowing restricted file access, an issue known as the confused deputy problem.". Is that enough to answer the question?
Answer: no