anchor.diff:              {"X-Ops-Sign version=\"1.0\" version=\"1.1\"", ReqOther, StateOther}
       end.
   
  -%%%
  -%%% Clients are inherently a member of the org, but users are not.
  -%%% If we add a user to the org, and then disassociate them, there will be acls left behind
  -%%% granting permissions on the org objects, so we must check user association and
  -%%% permissions
  -%%%
  +%% Clients are inherently a member of the org, but users are not.  If
  +%% we add a user to the org, and then disassociate them, there will be
  +%% acls left behind granting permissions on the org objects, so we
  +%% must check user association and permissions
   authorized_by_org_membership_check(Req, #base_state{requester_type=client}=State) ->
       {true, Req, State};
   authorized_by_org_membership_check(Req, State = #base_state{organization_name = OrgName,
  
positive.code:             {false, Req1, State1}
      end.
  
  create_in_container(Container, Req, #base_state{chef_authz_context = AuthzContext,
                                                  organization_guid = OrgId,
                                                  requestor = Requestor,
  
negative.code:                                                 Container) of
          {ok, AuthzId} ->
              State1 = State#base_state{resource_state = set_authz_id(AuthzId, RS)},
              %% return forbidden: false
              {false, Req, State1};
          {error, forbidden} ->
              {Req1, State1} = set_forbidden_msg(Req, State),
              %% return forbidden: true
              {true, Req1, State1}
      end.
  
  