anchor.diff:              %% actor is not the owner, not permitted by ACL but permitted by policy
               just_allowed_by_policy(ObjectAcl, RcPid, RD, Ctx, LocalCtx);
           {false, _} ->
  -            % policy says undefined or false
  +            %% policy says undefined or false
               %% ACL check failed, deny access
               riak_cs_wm_utils:deny_access(RD, Ctx)
       end.
  
positive.code:         {error, notfound}=Error1 ->
              Error1;
          {error, multiple_bucket_owners}=Error2 ->
               Error2
      end.
  
  %% Helper functions for dealing with combinations of Object ACL
  
negative.code:     riak_cs_acl_utils:requested_access(Method, true).
  
  -spec extract_object_acl(notfound | lfs_manifest()) ->
                                  undefined | acl().
  extract_object_acl(notfound) ->
      undefined;
  extract_object_acl(?MANIFEST{acl=Acl}) ->
  