Joshhw opened a new issue #7879: URL: https://github.com/apache/pulsar/issues/7879
**Describe the bug** when creating a function the method used to check for superUser status does not use the AuthorizationProvider's isSuperUser method. Instead it uses its own version of the superUser method which circumvents the implemented version. The method can be found [here](https://github.com/apache/pulsar/blob/77dccd2824699c9be96f518a8a1079df51612c8e/pulsar-functions/worker/src/main/java/org/apache/pulsar/functions/worker/rest/api/ComponentImpl.java#L1429). **To Reproduce** Steps to reproduce the behavior: 1. use a superUser token 2. try to create a function with a super user that relies on a custom AuthorizationProvider's isSuperUser method 3. see it fail **Expected behavior** I expect the code to rely on the implemented AuthorizationProvider's isSuperUser method or some version of it. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
