anchor.diff:  handle_auth_info(chef_wm_named_data, Req, #base_state{requestor = Requestor}) ->
       case wrq:method(Req) of
           'GET' ->
  -            authorized;
  +            chef_wm_authz:all_but_validators(Requestor);
           'POST' -> %% create data_item
               chef_wm_authz:allow_admin(Requestor);
           'DELETE' -> %% delete data
  
positive.code:         'GET' -> %% show
              chef_wm_authz:allow_admin_or_requesting_node(Requestor, ClientName);
          'DELETE' -> %% delete
              #chef_client{validator = IsValidator} = Client,
              case IsValidator of
                  true -> %% We can't delete the validator
                      forbidden;
                  _Else ->
                      chef_wm_authz:allow_admin_or_requesting_node(Requestor, ClientName)
  
negative.code:              Module =:= chef_wm_sandboxes ->
      case wrq:method(Req) of
          'GET' ->
              chef_wm_authz:all_but_validators(Requestor);
          'POST' -> %% create
              chef_wm_authz:allow_admin(Requestor);
          _Else ->
  