anchor.diff:  parse_binary_json(Body) ->
       {ok, chef_json:decode_body(Body)}.
   
  +% Translate types; in ACLs, everything is an object, actor, group, or container
  +acl_path(node, AuthzId) ->
  +    acl_path(object, AuthzId);
  +acl_path(role, AuthzId) ->
  +    acl_path(object, AuthzId);
  +acl_path(data_bag, AuthzId) ->
  +    acl_path(object, AuthzId);
  +acl_path(environment, AuthzId) ->
  +    acl_path(object, AuthzId);
  +acl_path(cookbook, AuthzId) ->
  +    acl_path(object, AuthzId);
  +acl_path(client, AuthzId) ->
  +    acl_path(actor, AuthzId);
  +acl_path(user, AuthzId) ->
  +    acl_path(actor, AuthzId);
  +acl_path(organization, AuthzId) ->
  +    acl_path(container, AuthzId);
   acl_path(Type, AuthzId) ->
       "/" ++ atom_to_list(Type) ++ "s/" ++ binary_to_list(AuthzId) ++ "/acl".
   
  
positive.code:                       OrgName, DbContext).
  
  validate_authz_id(Req, State, AclState, Type, OrgId, OrgName, DbContext) ->
      Name = chef_wm_util:object_name(Type, Req),
      io:format("---val got name: ~p~n", [Name]),
      try
          AuthzId = case Type of
                        cookbook ->
                            fetch_cookbook_id(DbContext, Name, OrgName);
                        Other ->
                            fetch_id(Other, DbContext, Name, OrgId)
                    end,
          io:format("---val got authzId: ~p~n", [AuthzId]),
          AclState1 = AclState#acl_state{authz_id = AuthzId},
  
negative.code:     % TODO: do we want to do it that way, or do we want to fetch the data now,
      % check and save it in the state instead?
      {authorized, Req, State}.
  
  to_json(Req, #base_state{requestor_id = RequestorId,
                           resource_state = AclState} = State) ->
  