Patent ID: 8375185

Claim:
A method performed by one or more processors, the method comprising: sending, by a client system to a hosted storage system, a first data object such that the hosted storage system stores the first data object, the first data object comprising an access control list specifying access permissions for data objects stored in the hosted storage system, wherein the hosted storage system provides hosted storage to a plurality of clients that are coupled to the hosted storage system; sending, by the client system to the hosted storage system, a request to store a second data object such, the request including an indicator that the first data object stored in the hosted storage system should be used as an access control list for the second data object, wherein the hosted storage system is configured to, in response to receiving the request to store the second data object, store the second data object and assign the first data object as an access control list for the second data object stored in the hosted storage system.