Question: I wanted to check commits to a branch, and I saw that there were commits that appear in 2 branches.

Why?
What does it mean? 

[![enter image description here](https://i.stack.imgur.com/x3Azq.png)](https://i.stack.imgur.com/x3Azq.png)

Answer: 
I'm not an expert at this, but since you are trying to make requests on another users behalf, from the APIs point of view the requests come from that user, not from the Admin. 

Have you considered adding an admin route that allows the admin user to obtain a session token for another user? That will allow the admin to send the requests to the endpoints you already have using that other users token.
I think a key thing will be your exact requirements around what it means to "post on behalf of another user"

But, assuming its just the author byline I would simply have a property on the Post object

```
class Post
{
    public string AuthoredByUserId {get;set;}
    ....
}

```

Now in your controller you can check whether AuthoredByUserId is the same as the user submitting the post and either allow it for super users or disallow it from normal users.

Having said that, personally I would *still* add a seperate endpoint simply so I can use built in authentication per endpoint methods, rather than having to code an authentication check eg.

```
[Authorise(Roles="ContentWriter")]
public Action AddPost(Post)
{
    ...error if AuthoredByUserId != the users Id
}

[Authorise(Roles="SUPER_ADMIN")]
public Action AddPostForAnotherUser(Post)
{
    ..ignore the userid validation
}

```