anchor.diff:          {error, Error} -> {error, Error}
       end.
   
  +get_ace_for_entity(RequestorId, AuthzType, Id, AccessMethod) ->
  +    Url = make_url([pluralize_resource(AuthzType), Id, acl, AccessMethod]),
  +    case oc_chef_authz_http:request(Url, get, [], [], RequestorId) of
  +        {ok, Data} ->
  +            ACE = extract_ace(Data),
  +            {ok, ACE};
  +        %% Expected errors are forbidden, not_found, server_error
  +        {error, Error} -> {error, Error}
  +    end.
  +
   %
   % Replace the actors and groups of an ace
   % PUT {objects|groups|actors|containers}/:id/acl/:action
  
positive.code:         {error, Error} -> {error, Error}
      end.
  
  %
  % Get acl from an entity
  % GET {objects|groups|actors|containers}/:id/acl
  %
  -spec get_acl_for_resource(requestor_id(), resource_type(), binary()) -> {ok, authz_acl()}|{error, any()}.
  get_acl_for_resource(RequestorId, ResourceType, Id) ->
      Url = make_url([pluralize_resource(ResourceType), Id, acl]),
      case oc_chef_authz_http:request(Url, get, [], [], RequestorId) of
  
negative.code:          make_context/2,
           is_authorized_on_resource/6,
           ping/0,
           remove_actor_from_actor_acl/2,
           remove_ace_for_entity/6,
           add_ace_for_entity/6
          ]).
  
  -ifdef(TEST).
  