Which of the following statements are incorrect about permission management of object storage?

In Huawei object storage, permission management is commonly implemented through access control lists (ACLs) and bucket policies. A bucket policy can control access permissions for one or multiple users at the bucket level and can also define permissions for objects within the bucket. ACLs are also used to grant accounts access to storage resources, so option D is correct. The incorrect statement is option C because ACLs are mainly used to grant permissions rather than explicitly deny permissions. Deny logic and more complex access conditions are normally handled through bucket policies. This distinction matters in object storage because bucket policies provide more flexible permission rules, while ACLs provide simpler account-level authorization. Therefore, the incorrect statement is that ACLs can be used to grant and deny permissions.