On Tue, Sep 23, 2014 at 9:20 AM, Steve Kingsland <steve.kingsland at opower.com> wrote: > Using the S3 API to Object Gateway, let's say that I create an object named > "/some/path/foo.bar". When I browse this object in Ceph using a graphical S3 > client, "some" and "path" show up as directories. I realize that they're not > actually directories, but can I set an ACL on them, just like I can with > objects? Not really. These are just virtual directories, the namespace is completely flat. Even if you could set ACLs on them, these wouldn't apply to the 'contained' objects. Yehuda