anchor.diff:  
   -export([container_record_to_authz_id/2,
            fetch_container/3,
  +         make_global_admin_group_name/1,
            fetch_global_group_authz_id/3,
            fetch_group_authz_id/3,
  +         fetch_group_sql/3,
            make_context/2,
            statements/1
           ]).
  
positive.code: -include("oc_chef_authz.hrl").
  -include("oc_chef_authz_db.hrl").
  -include_lib("sqerl/include/sqerl.hrl").
  
  -define(gv(Key, PList), proplists:get_value(Key, PList)).
  -define(user_db, "opscode_account").
  
negative.code:             fetch_container_sql(Ctx, OrgId, ContainerName)
      end.
  
  make_global_admin_group_name(OrgName) ->
    lists:flatten(io_lib:format("~s_global_admins", [OrgName])).
  
  %% TODO: the only global groups are global admins groups and this should only be used for those
  fetch_global_group_authz_id(#oc_chef_authz_context{otto_connection=Server, darklaunch = Darklaunch} = Ctx,
                              OrgName, GroupName) ->
      RealGroupName = lists:flatten(io_lib:format("~s_~s", [OrgName, GroupName])),
      %% global admins are strictly related to organizations, so we'll trigger
      %% whether the global admins group is in sql depending on where the org is
      case xdarklaunch_req:is_enabled(<<"couchdb_organizations">>, Darklaunch) of
          true ->
              fetch_group_authz_id_couchdb(Server, undefined, RealGroupName);
          false ->
              fetch_group_authz_id_sql(Ctx, ?GLOBAL_PLACEHOLDER_ORG_ID, RealGroupName)
      end.
  
  fetch_container_couchdb(Server, OrgId, ContainerName) ->
      case fetch_by_name(Server, OrgId, ContainerName, authz_container) of
  