Abstract: A hosted storage system includes a namespace that contains object identifiers. A first object containing a first data component is stored. A first object identifier in the namespace uniquely identifies the first object. A second object containing a second data component is stored. A second object identifier in the namespace uniquely identifies the second object. A compose object request that designating the first object identifier, the second object identifier, and a third object identifier in the namespace is received. A third object that includes the first data component and the second data component without duplicating the first data component and the second data component is created. The third object identifier is associated with the third object such that the third object identifier uniquely identifies the third object.

Abstract: A first access control list method is stored in a hosted storage system and in association with a storage structure. The first access control list is designed to grant permission to write data objects to the storage structure but not designed to grant permission to read objects from the storage structure. The first access control list grants a first user permission to write data objects to the storage structure. A second access control list is stored in the hosted storage system and in association with a first data object stored in the storage structure. The second access control list is designed to grant permission to read the first data object. The second access control list grants a second user permission to read the first data object.

Abstract: In one general aspect, this document describes a computer-implemented method for creating buckets in a hosted storage platform. The method may include receiving, at a hosted storage computer system that utilizes a single namespace across data stores of the hosted storage computer system, a request from a user of the hosted storage computer system to create a bucket having a name that includes a domain name. The method may also include verifying that the user is an authorized manager of a domain that corresponds to the domain name. The method may also include creating the bucket on the hosted storage computer system upon verification that the user is an authorized manager of the domain.

Abstract: An initial portion of an object is received at a hosted storage system. The initial portion of the object is stored at the hosted storage system. After receiving the initial portion of the object, a timer is started. Prior to the expiration of the timer, whether an additional portion of the object is received at the hosted storage system is determined. The initial portion is deleted upon the expiration of the timer if the additional portion is not received. The timer is reset if the additional portion is received.