anchor.diff:  handle_auth_info(chef_wm_named_data, Req, #base_state{requestor = Requestor}) ->
       case wrq:method(Req) of
           'GET' ->
  -            authorized;
  +            chef_wm_authz:all_but_validators(Requestor);
           'POST' -> %% create data_item
               chef_wm_authz:allow_admin(Requestor);
           'DELETE' -> %% delete data
  
positive.code:              Module =:= chef_wm_sandboxes ->
      case wrq:method(Req) of
          'GET' ->
              authorized;
          'POST' -> %% create
              chef_wm_authz:allow_admin(Requestor);
          _Else ->
  
negative.code:         _Else ->
              forbidden
      end;
  handle_auth_info(Module, Req, #base_state{requestor = Requestor})
          when Module =:= chef_wm_nodes;
               Module =:= chef_wm_search ->
      case wrq:method(Req) of
          'GET' ->
              chef_wm_authz:all_but_validators(Requestor);
          'POST' ->
              chef_wm_authz:all_but_validators(Requestor);
          _Else ->
              forbidden
      end;
  handle_auth_info(Module, Req, #base_state{requestor = Requestor})
          when Module =:= chef_wm_cookbooks;
               Module =:= chef_wm_environment_cookbooks;
               Module =:= chef_wm_environment_recipes;
               Module =:= chef_wm_environment_roles;
               Module =:= chef_wm_search_index;
               Module =:= chef_wm_status ->
      case wrq:method(Req) of
          'GET' ->
              chef_wm_authz:all_but_validators(Requestor);
          _Else ->
              forbidden
      end;
  
  %% The named principal endpoint currently performs no auth checking, and thus doesn't set a
  %% requestor in the base state.  This will allow validators to call this endpoint.  When
  %% request signing is in place for this endpoint, this should be changed as appropriate.
  handle_auth_info(chef_wm_named_principal, Req, _State) ->
      case wrq:method(Req) of
          'GET' ->
              authorized;
          _Else ->
              forbidden
      end;
  
  handle_auth_info(chef_wm_depsolver, Req, #base_state{requestor = Requestor}) ->
      case wrq:method(Req) of
          'POST' ->
              chef_wm_authz:all_but_validators(Requestor);
          _Else ->
              forbidden
      end;
  