anchor.diff:  
   % TODO: move these somewhere generic; also used by oc_chef_wm_acl
   -export([
  +         fetch_bare/2,
            find_clients_names/2,
            find_client_authz_ids/3,
            find_groups_names/2,
  
positive.code: parse_binary_json(Bin) ->
      {ok, chef_json:decode_body(Bin)}.
  
  fetch(#oc_chef_group{for_requestor_id = RequestorId} = Record, CallbackFun) ->
      case chef_object:default_fetch(Record, CallbackFun) of
          #oc_chef_group{authz_id = GroupAuthzId} = GroupRecord ->
  
negative.code:             Other
      end.
  
  
  fetch_authz_ids(GroupAuthzId, RequestorId) ->
      Result = oc_chef_authz_http:request("/groups/" ++ binary_to_list(GroupAuthzId), get, ?DEFAULT_HEADERS, [], RequestorId),
      case Result of
  