Designing Secure "Run As" Functionality(stormpath.com)

https://www.stormpath.com/blog/helping-hands-let-one-user-act-behalf-another-securely