anchor.diff:      end.
   
   forbidden(RD, Ctx=#ctx{security=undefined}) ->
  -    {riak_kv_wm_utils:is_forbidden(RD), RD, Ctx};
  +    case riak_kv_wm_utils:is_forbidden(RD) of
  +        true ->
  +            {true, RD, Ctx};
  +        false ->
  +            malformed_check_doc(RD, Ctx)
  +    end;
  +
   forbidden(RD, Ctx=#ctx{security=Security}) ->
       case riak_kv_wm_utils:is_forbidden(RD) of
           true ->
  
positive.code:         undefined ->
              {true, missing_content_type(RD), Ctx};
          _ -> {false, RD, Ctx}
      end.
  
  %% @spec malformed_timeout_param(reqdata(), context()) ->
  
negative.code:                             %% we do this early as it used to be done in the
                              %% malformed check, so the rest of the resource
                              %% assumes that the key is present.
                              malformed_check_doc(RD, Ctx);
                          _ ->
                              {false, RD, Ctx}
                      end
  