anchor.diff:  %% to retrieve the clients group, so that we may add newly-created
   %% clients to it (we could also start deleting clients from it, too).
   -spec fetch_group_authz_id(Context :: oc_chef_authz_context(),
  -                           OrgId :: binary(),
  +                           OrgId :: binary() | undefined,
                              GroupName :: binary()) ->  object_id() |
                                                         {not_found, authz_group}.
   fetch_group_authz_id(#oc_chef_authz_context{otto_connection=Server,
  
positive.code: %% Copyright 2012 Opscode, Inc. All Rights Reserved.
  %%
  %% This file is provided to you under the Apache License,
  %% Version 2.0 (the "License"); you may not use this file
  
negative.code:             fetch_container_sql(Ctx, OrgId, ContainerName)
      end.
  
  
  fetch_global_group_authz_id(#oc_chef_authz_context{otto_connection=Server, darklaunch = _Darklaunch} = _C,
                     OrgName, GroupName) ->
      RealGroupName = lists:flatten(io_lib:format("~s_~s", [OrgName, GroupName])),
      fetch_group_authz_id_couchdb(Server, undefined, RealGroupName).
  
  fetch_container_couchdb(Server, OrgId, ContainerName) ->
      case fetch_by_name(Server, OrgId, ContainerName, authz_container) of
          {ok, Container} ->
  