anchor.diff:  maybe_delete_authz_id_or_error(not_found, _Object, _RequestorId) ->
       %% if the object wasn't found, we take no further action
       not_found;
  -maybe_delete_authz_id_or_error(1, #chef_data_bag_item{}, _RequestorId) ->
  -    %% no authz_id for data_bag_items so just return
  +maybe_delete_authz_id_or_error(1, Object, _RequestorId)  when is_record(Object, chef_data_bag_item);
  +                                                              is_record(Object, oc_chef_org_user_association);
  +                                                              is_record(Object, oc_chef_org_user_invite) ->
  +    %% These objects have no authz id
       ok;
   maybe_delete_authz_id_or_error({ok, 1}, #chef_cookbook_version{}, _RequestorId) ->
       %% With status {ok, 1} we've deleted _only_ the cbv, not the cb so we leave the authz_id
  
positive.code: 
  -spec delete_from_db(chef_db:db_context(),
                       RequestorId :: object_id(),
                       chef_object() |
                       #chef_cookbook_version{} |
                       #oc_chef_container{} |
                       #oc_chef_group{}) -> ok |
                                                                    not_found.
  %% @doc Delete an object from the database.  Provides pattern-matching sugar over chef_db
  %% delete functions, making the `delete` function in this module very simple. Also deletes
  %% the corresponding authz object (if there is one and it should be deleted). That is, it
  
negative.code: 
  -spec maybe_delete_authz_id_or_error(Status, Object, RequestorId) -> ok | not_found when
        Status :: {ok, 1 | 2} | not_found | {error, _},
        Object :: delete_type(),
        RequestorId :: object_id().
  %% Some Chef objects do not have an authz id (data_bag_items) and some (cookbook_versions)
  %% share an authz id (cookbook). This code determins when the parent authz id should be
  