BACKGROUND

Various storage systems store and/or group data and/or objects in various types of data containers (e.g., buckets, blobs, etc.). Example types of storage systems include object stores, key-value stores, etc. In an example system, stored objects may include the data itself, a variable amount of metadata, and a globally unique identifier.

Storage can be implemented at multiple levels, including the device level (object-storage device), the system level, and the interface level. In an example storage system, interfaces can be directly programmable by the application, namespaces may span multiple instances of physical hardware, and data-management functions like data replication and data distribution may function at object-level granularity.

Some data container storage systems allow retention of massive amounts of unstructured data. Data container storage is used for purposes such as storing photos on social media, songs on music services, or files in online collaboration services, as a non-exhaustive set of examples.

Some data containers are accessed via a single identifier that is associated with access controls. The single identifier limits flexibility in the granularity at which access can be customized for a data container. For example, a data container-level policy (a policy associated with a particular data container) specifies a single set of access rules applicable to all accesses of the data container.

