anchor.diff:  	riakacl:remove_subject_groups(Pid, SubBucket, SubKey, [GroupReader, GroupWriter, GroupNobody]),
   	true.
   
  +%% The subject gets access to the object, if they both are members of the same group.
  +%% If more then one group is matched, access rules are merged providing
  +%% maximum possible access of all matched groups. The granted access is always
  +%% equal or better any matched particular group provides.
   permission_2group_best(Config) ->
   	SubBucket = ?config(subject_bucket, Config),
   	ObjBucket = ?config(object_bucket, Config),
  
positive.code: 	riakacl:remove_object_acl(Pid, ObjBucket, ObjKey, [Group]),
  	true.
  
  permission_denied_object_0group(Config) ->
  	SubBucket = ?config(subject_bucket, Config),
  	ObjBucket = ?config(object_bucket, Config),
  
negative.code: 	riakacl:remove_subject_groups(Pid, SubBucket, SubKey, [GroupReader, GroupWriter, GroupNobody]),
  	true.
  
  %% Groups with broken data format are ignored.
  permission_2group_brokenformat(Config) ->
  	SubBucket = ?config(subject_bucket, Config),
  	ObjBucket = ?config(object_bucket, Config),
  