anchor.diff:                                         Ctx :: term(),
                                          Method :: atom(),
                                          Deletable :: boolean()) ->
  -    authorized_response().
  +                                              authorized_response().
   actor_is_owner_but_denied_policy(User, RD, Ctx, Method, Deletable)
  -        when Method =:= 'PUT' orelse
  -             Method =:= 'POST' orelse
  -             (Deletable andalso Method =:= 'DELETE') ->
  +  when Method =:= 'PUT' orelse
  +       Method =:= 'POST' orelse
  +       (Deletable andalso Method =:= 'DELETE') ->
       AccessRD = riak_cs_access_log_handler:set_user(User, RD),
       riak_cs_wm_utils:deny_access(AccessRD, Ctx);
   actor_is_owner_but_denied_policy(User, RD, Ctx, Method, Deletable)
  -        when Method =:= 'GET' orelse
  -             (Deletable andalso Method =:= 'HEAD') ->
  +  when Method =:= 'GET' orelse
  +       (Deletable andalso Method =:= 'HEAD') ->
       {{halt, 404}, riak_cs_access_log_handler:set_user(User, RD), Ctx}.
   
   -spec actor_is_owner_and_allowed_policy(User :: rcs_user(),
                                           RD :: term(),
                                           Ctx :: term(),
                                           LocalCtx :: term()) ->
  -    authorized_response().
  +                                               authorized_response().
   actor_is_owner_and_allowed_policy(undefined, RD, Ctx, _LocalCtx) ->
       {false, RD, Ctx};
   actor_is_owner_and_allowed_policy(User, RD, Ctx, LocalCtx) ->
  
positive.code:                                            Ctx :: term(),
                                             Method :: atom(),
                                             Deletable :: boolean()) ->
      authorized_response().
  actor_is_not_owner_and_denied_policy(OwnerId, RD, Ctx, Method, Deletable)
          when Method =:= 'PUT' orelse
          (Deletable andalso Method =:= 'DELETE') ->
      AccessRD = riak_cs_access_log_handler:set_user(OwnerId, RD),
      riak_cs_wm_utils:deny_access(AccessRD, Ctx);
  actor_is_not_owner_and_denied_policy(_OwnerId, RD, Ctx, Method, Deletable)
          when Method =:= 'GET' orelse
          (Deletable andalso Method =:= 'HEAD') ->
      {{halt, 404}, RD, Ctx}.
  
  -spec actor_is_not_owner_but_allowed_policy(User :: rcs_user(),
  
negative.code:     riak_cs_acl_utils:requested_access(Method, true).
  
  -spec extract_object_acl(notfound | lfs_manifest()) ->
                                  undefined | acl().
  extract_object_acl(notfound) ->
      undefined;
  extract_object_acl(?MANIFEST{acl=Acl}) ->
  