anchor.diff:          Error -> Error
       end.
   
  +%% @doc Retrieve the authz ID for a given group in an organaization.
  +%%
  +%% This is not `fetch_group`, because currently, we have no need for
  +%% complete group "objects" in the system.  This is only really used
  +%% to retrieve the clients group, so that we may add newly-created
  +%% clients to it (we could also start deleting clients from it, too).
  +-spec fetch_group_authz_id(Context :: oc_chef_authz_context(),
  +                           OrgId :: binary(),
  +                           GroupName :: binary()) ->  object_id() |
  +                                                      {not_found, authz_group}.
  +fetch_group_authz_id(#oc_chef_authz_context{otto_connection=Server}, OrgId, GroupName) ->
  +    case fetch_by_name(Server, OrgId, GroupName, authz_group) of
  +        {ok, Group} ->
  +            Id = ej:get({<<"_id">>}, Group),
  +            AuthzId = fetch_auth_join_id(Server, Id, user_to_auth),
  +            AuthzId;
  +        {not_found, authz_group} ->
  +            {not_found, authz_group}
  +    end.
  +
   -spec container_record_to_authz_id(any(), any()) -> object_id().
   container_record_to_authz_id(#oc_chef_authz_context{}, #chef_container{authz_id = Id}) ->
       Id.
  
positive.code: %% design_and_view_for_type(authz_client) ->
  %%     {?mixlib_auth_client_design, "by_clientname"};
  design_and_view_for_type(authz_container) ->
      {?mixlib_auth_container_design, "by_containername"}.
  %% design_and_view_for_type(authz_cookbook) ->
  %%     {?mixlib_auth_container_design, "by_display_name"};
  %% design_and_view_for_type(authz_data_bag) ->
  %%     {?mixlib_auth_data_bag_design, "by_name"};
  %% design_and_view_for_type(authz_environment) ->
  %%     {?mixlib_auth_environment_design, "all_id"};
  %% design_and_view_for_type(authz_group) ->
  %%     {?mixlib_auth_group_design, "by_groupname"};
  %% design_and_view_for_type(authz_node) ->
  %%     {?mixlib_auth_node_design, "by_name"};
  %% design_and_view_for_type(authz_role) ->
  
negative.code: 
  -export([container_record_to_authz_id/2,
           fetch_container/3,
           fetch_group_authz_id/3,
           make_context/1
          ]).
  
  -include("oc_chef_authz.hrl").
  -include("oc_chef_authz_db.hrl").
  