Basic ACL has some restrictions, so the user can't deny system requests like object.Head or object.RangeHash. This is required to keep system processes running e.g. object replication.
Extended ACL can override those restriction which doesn't seem right to me. Restricted object.Head request will always fail replication check and produce extra work on replicator mechanism.
/cc @carpawell
Basic ACL has some restrictions, so the user can't deny system requests like
object.Headorobject.RangeHash. This is required to keep system processes running e.g. object replication.Extended ACL can override those restriction which doesn't seem right to me. Restricted
object.Headrequest will always fail replication check and produce extra work on replicator mechanism./cc @carpawell