The default is that the object is private to the creating user .
Object may also be public or controlled by an access control list .
The default is that the object is private to the creating user , but it may also be public or controlled by an access control list .