Object service provides a wealth of object resource (bucket or object) access permission control capabilities, of which ACL can only

Used to prohibit permissions, and cannot grant permissions.