Which of the following affects how permissions are set on object storage?

Object storage systems implement access control by embedding permission information in object and container metadata, using specific metadata headers and attributes to define which users or services can read, write, or delete objects. The metadata layer is the mechanism through which policy enforcement rules - including those derived from ACLs - are stored and applied at the object level.

Retention settings govern how long an object must be preserved from deletion or modification, which is a data lifecycle policy rather than an access permission control mechanism.

Object ID is a system-assigned unique identifier used to locate and retrieve an object within storage, not a mechanism for setting or enforcing access permissions.

ACLs define access rules at a conceptual level, but in object storage implementations those ACL entries are themselves stored and managed as part of the object's metadata, making metadata the underlying control mechanism rather than a separate feature.