anchor.diff:                        OrgName, DbContext).
   
   validate_authz_id(Req, State, AclState, Type, OrgId, OrgName, DbContext) ->
  -    Name = chef_wm_util:object_name(Type, Req),
  +    Name = case Type of
  +               organization ->
  +                   <<"organizations">>;
  +               NotOrganization ->
  +                   chef_wm_util:object_name(NotOrganization, Req)
  +           end,
       io:format("---val got name: ~p~n", [Name]),
       try
           AuthzId = case Type of
                         cookbook ->
                             fetch_cookbook_id(DbContext, Name, OrgName);
  -                      Other ->
  -                          fetch_id(Other, DbContext, Name, OrgId)
  +                      NotCookbook ->
  +                          fetch_id(NotCookbook, DbContext, Name, OrgId)
                     end,
           io:format("---val got authzId: ~p~n", [AuthzId]),
           AclState1 = AclState#acl_state{authz_id = AuthzId},
  
positive.code:             throw({not_found, Name});
          #chef_environment{authz_id = AuthzId} ->
              AuthzId
      end;
  fetch_id(organization, _DbContext, _Name, _OrgId) ->
      % TODO: implement; this is different than all the others
      error(not_implemented).
  
  % TODO: bespoke code; cookbooks retrieval is by orgname instead of ID
  fetch_cookbook_id(DbContext, Name, OrgName) ->
  
negative.code: % TODO: don't like this; we only need the authz id, so grabbing complete
  % objects is wasteful.  Also, this might be more suited to be moved to
  % oc_chef_wm_util or something
  fetch_id(organization, DbContext, Name, _OrgId) ->
      % This is actually a request for the default org container
      % TODO: (Or is it?  This is failing still)
      fetch_id(container, DbContext, Name, <<"00000000000000000000000000000000">>);
  fetch_id(user, DbContext, Name, _OrgId) ->
      case chef_db:fetch(#chef_user{username = Name}, DbContext) of
          not_found ->
  