anchor.diff:              {true, Req, State}
       end.
   
  -forbidden(RD, Ctx) ->
  +forbidden(ReqData, Context) ->
       case riak_core_security:is_enabled() of
           true ->
  -            RD1 = wrq:set_resp_header("Content-Type", "text/plain", RD),
  -            {true, wrq:set_resp_body(<<"Riak Search 1.0 is"
  -                                             " deprecated in Riak 2.0 and is"
  -                                             " not compatible with"
  -                                             " security.">>, RD1), Ctx};
  +            {true,
  +                wrq:set_resp_body(<<"Riak Search 1.0 is deprecated in Riak 2.0"
  +                    " and is not compatible with security.">>,
  +                    wrq:set_resp_header("Content-Type", "text/plain", ReqData)),
  +                Context};
           false ->
  -            {false, RD, Ctx}
  +            Class = {riak_search, query},
  +            riak_kv_wm_utils:is_forbidden(ReqData, Class, Context)
       end.
   
   content_types_provided(Req, #state{wt=WT}=State) ->
  
positive.code: %% -------------------------------------------------------------------
  %%
  %% Copyright (c) 2007-2012 Basho Technologies, Inc.  All Rights Reserved.
  %%
  %% -------------------------------------------------------------------
  
  
negative.code:                     try
                          {ok, QueryOps} = Client:parse_query(Schema, SQuery#squery.q),
                          {ok, FilterOps} = Client:parse_filter(Schema, SQuery#squery.filter),
                          {false, Req, validate_state(State#state{schema=Schema,
                                                                  squery=SQuery,
                                                                  query_ops=QueryOps,
                                                                  filter_ops=FilterOps,
  