Add authorization check of superuser for create/update APIs

[shubham-y]

Currently, any user can call the create and update APIs. We need to add a check if the call is made by a superuser or not.