anchor.diff:      %%------------------------------
   
       %%-- create forbidden by acl ---
  -    Ace4 = ace:to_json(#access_control_entity{
  +    Ace3 = ace:to_json(#access_control_entity{
           acetype = ?allow_mask,
           identifier = UserId1,
           name = UserName1,
           aceflags = ?no_flags_mask,
  -        acemask = ?execute_mask
  +        acemask = ?write_metadata_mask
       }, cdmi),
  -    Ace5 = ace:to_json(#access_control_entity{
  +    Ace4 = ace:to_json(#access_control_entity{
           acetype = ?deny_mask,
           identifier = UserId1,
           name = UserName1,
           aceflags = ?no_flags_mask,
  -        acemask = ?write_mask
  +        acemask = ?write_object_mask
       }, cdmi),
  -    RequestBody18 = #{<<"metadata">> => #{<<"cdmi_acl">> => [Ace4, Ace5]}},
  +    RequestBody18 = #{<<"metadata">> => #{<<"cdmi_acl">> => [Ace3, Ace4]}},
       RawRequestBody18 = json_utils:encode(RequestBody18),
       RequestHeaders18 = [user_1_token_header(Config), ?CONTAINER_CONTENT_TYPE_HEADER, ?CDMI_VERSION_HEADER],
   
  
positive.code:     }, cdmi),
  
      MetadataAclReadFull = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [ReadFull, WriteAcl]}}),
      MetadataAclReadExecute = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [Read, Execute, WriteAcl]}}),
      MetadataAclDelete = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [Delete]}}),
      MetadataAclWrite = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [Write]}}),
      MetadataAclReadWrite = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [Write, Read]}}),
      MetadataAclReadWriteFull = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [ReadWriteVerbose]}}),
      MetadataAclReadWriteExecute = json_utils:encode(#{<<"metadata">> => #{<<"cdmi_acl">> => [Write, Read, Execute]}}),
  
      %%----- read file test ---------
      % create test file with dummy data
  
negative.code:         identifier = UserId1,
          name = UserName1,
          aceflags = ?no_flags_mask,
          acemask = ?read_all_object_mask
      }, cdmi),
      ReadFull = #{
          <<"acetype">> => ?allow,
          <<"identifier">> => Identifier1,
          <<"aceflags">> => ?no_flags,
          <<"acemask">> => <<
              ?read_object/binary, ",",
              ?read_metadata/binary, ",",
              ?read_attributes/binary, ",",
              ?read_acl/binary
          >>
      },
      Write = ace:to_json(#access_control_entity{
          acetype = ?allow_mask,
          identifier = UserId1,
          name = UserName1,
          aceflags = ?no_flags_mask,
          acemask = ?write_all_object_mask
      }, cdmi),
      ReadWriteVerbose = #{
          <<"acetype">> => ?allow,
          <<"identifier">> => Identifier1,
          <<"aceflags">> => ?no_flags,
          <<"acemask">> => <<
              ?read_object/binary, ",",
              ?read_metadata/binary, ",",
              ?read_attributes/binary, ",",
              ?read_acl/binary, ",",
              ?write_object/binary, ",",
              ?write_metadata/binary, ",",
              ?write_attributes/binary, ",",
              ?delete/binary, ",",
              ?write_acl/binary
          >>
      },
      WriteAcl = ace:to_json(#access_control_entity{
          acetype = ?allow_mask,
          identifier = UserId1,
  