It has also been shown that the promise of ACLs of giving access to an object to only one person can never be guaranteed in practice