Question: does noobaa support folder-scoped access control?

[gregsheremeta]

I'm evaluating noobaa as a drop-in replacement for minio for a specific use case. One of the requirements is to support a single globally shared bucket, and within that bucket, have subfolders that are scoped to specific users.

For example:

Single Global Bucket
|
| --- Bob's folder
|    |
|     --- Bob's object 1
|     --- Bob's object 2
 --- Alice's folder
     |
      --- Alice's object 1
      --- Alice's object 2

My requirement is that both Bob and Alice can access only their own respective folders and objects within those folders. They wouldn't be able to do a directory listing of Single Global Bucket and see anything except their own personal folder.

Additionally, this authz paradigm must work whether the bucket is backed by local storage (PVs), AWS S3, or GCS.

Is this supported by noobaa?