anchor.diff:  %%         {boolean(), webmachine:wrq(), context()}
   %% @doc Determine whether an object write violates the write mask of
   %%      the bucket.
  -object_forbidden(ReqData, Context=#ctx{bucket=Bucket,jiak_context=JC}) ->
  +object_forbidden(ReqData, Context=#ctx{jiak_context=JC,module=Mod}) ->
       {Diffs, NewContext0} = diff_objects(ReqData, Context),
       NewContext = NewContext0#ctx{jiak_context=JC:set_diff(Diffs)},
  -    Permitted = check_write_mask(Bucket, Diffs),    
  +    Permitted = check_write_mask(Mod, Diffs),    
       case Permitted of
           false ->
               {true,
  
positive.code: -module(jiak_resource).
  
  -export([init/1,
           allowed_methods/2,
           resource_exists/2,
           is_authorized/2,
  
negative.code:     {{halt, 404},
       wrq:append_to_response_body("Unknown bucket.", ReqData),
       Context};
  is_authorized(ReqData, Context=#ctx{key=Key,jiak_context=JC,module=Mod}) ->
      {Result, RD1, JC1} = Mod:auth_ok(Key, ReqData, JC),
      {Result, RD1, Context#ctx{jiak_context=JC1}}.
  
  %% @spec forbidden(webmachine:wrq(), context()) ->
  