anchor.diff:          {{halt, _}, _, _} = Halt ->
               Halt;
           {_, Req1, State1} ->
  -            case handle_authz_check(Mod, Req1, State1) of
  +            case handle_auth_info(Mod, Req1, State1) of
                   false ->
                       {Req2, State2} = set_forbidden_msg(Req1, State1),
                       {true, Req2, State2};
  
positive.code: %%
  %% forbidden helpers
  %%
  handle_authz_check(chef_wm_cookbook_version, Req, #base_state{requestor = Requestor}) ->
      case wrq:method(Req) of
          'PUT' -> %% create && update
              is_admin(Requestor);
  
negative.code:         _Else ->
              true
      end;
  handle_auth_info(chef_wm_roles, Req, #base_state{requestor = Requestor}) ->
      case wrq:method(Req) of
          'POST' ->
              is_admin(Requestor);
          _Else ->
              true
      end;
  handle_auth_info(chef_wm_named_role, Req, #base_state{requestor = Requestor}) ->
      case wrq:method(Req) of
          'PUT' ->
              is_admin(Requestor);
  