anchor.diff:                                                  organization_guid = OrgId,
                                                   requestor_id = RequestorId,
                                                   resource_state = RS} = State) ->
  -    case oc_chef_authz:create_object_if_authorized(AuthzContext, OrgId, RequestorId,
  -                                                Container) of
  +    case oc_chef_authz:create_entity_if_authorized(AuthzContext, OrgId, RequestorId,
  +                                                   Container) of
           {ok, AuthzId} ->
               State1 = State#base_state{resource_state = set_authz_id(AuthzId, RS)},
               %% return forbidden: false
  
positive.code: stats_hero_upstreams() ->
      [<<"authz">>, <<"couchdb">>, <<"rdbms">>, <<"s3">>, <<"solr">>].
  
  
negative.code:                                           type = Type,
                                            authz_id = AuthzId} = _Principal,
                           OrgName, DbContext) ->
      Member = is_user_in_org(Type, DbContext, Name, OrgName),
      {[{<<"name">>, Name},
        {<<"public_key">>, PublicKey},
        {<<"type">>, Type},
  