A few codeRabbitAi fixes

clients/js/test/plugins/collection/bubblegumV2.test.ts

@@ -1,5 +1,5 @@
 import test from 'ava';
-import { PublicKey } from '@metaplex-foundation/umi';
+import { generateSigner, PublicKey } from '@metaplex-foundation/umi';
 import {
   addCollectionPluginV1,
   createPlugin,
@@ -324,3 +324,67 @@ test('it cannot add external plugin to collection with BubblegumV2 plugin', asyn
     name: 'InvalidAuthority',
   });
 });
+
+test('it cannot create collection with BubblegumV2 plugin using wrong authority', async (t) => {
+  const umi = await createUmi();
+  const updateAuthorityResult = createCollection(umi, {
+    plugins: [
+      {
+        type: 'BubblegumV2',
+        authority: {
+          type: 'UpdateAuthority',
+        },
+      },
+    ],
+  });
+
+  await t.throwsAsync(updateAuthorityResult, {
+    name: 'InvalidAuthority',
+  });
+
+  const noneResult = createCollection(umi, {
+    plugins: [
+      {
+        type: 'BubblegumV2',
+        authority: {
+          type: 'None',
+        },
+      },
+    ],
+  });
+
+  await t.throwsAsync(noneResult, {
+    name: 'InvalidAuthority',
+  });
+
+  const ownerResult = createCollection(umi, {
+    plugins: [
+      {
+        type: 'BubblegumV2',
+        authority: {
+          type: 'Owner',
+        },
+      },
+    ],
+  });
+
+  await t.throwsAsync(ownerResult, {
+    name: 'InvalidAuthority',
+  });
+
+  const addressResult = createCollection(umi, {
+    plugins: [
+      {
+        type: 'BubblegumV2',
+        authority: {
+          type: 'Address',
+          address: generateSigner(umi).publicKey,
+        },
+      },
+    ],
+  });
+
+  await t.throwsAsync(addressResult, {
+    name: 'InvalidAuthority',
+  });
+});

programs/mpl-core/src/plugins/internal/permanent/bubblegum_v2.rs

@@ -18,6 +18,8 @@ pub struct BubblegumV2 {}
 
 impl BubblegumV2 {
     /// List of other plugins allowed on collections with the Bubblegum V2 plugin.
+    /// The BubblegumV2 plugin limits what can be on the collection to plugins that are
+    /// supported and validated at runtime by the Bubblegum program.
     pub const ALLOW_LIST: [PluginType; 6] = [
         PluginType::Attributes,
         PluginType::PermanentFreezeDelegate,
@@ -76,7 +78,9 @@ impl PluginValidation for BubblegumV2 {
         _ctx: &PluginValidationContext,
     ) -> Result<ValidationResult, ProgramError> {
         // If the BubblegumV2 plugin is present, no external plugin adapters
-        // can be added.
+        // can be added.  The BubblegumV2 plugin limits what can be on the
+        // collection to plugins that are supported and validated at runtime
+        // by the Bubblegum program.
         reject!()
     }
 }

programs/mpl-core/src/processor/create_collection.rs

@@ -181,6 +181,11 @@ pub(crate) fn process_create_collection<'a>(
 
                 // Bubblegum V2 plugin always has a fixed authority.
                 let authority = if plugin_type == PluginType::BubblegumV2 {
+                    if let Some(supplied) = &plugin.authority {
+                        if supplied != &plugin.plugin.manager() {
+                            return Err(MplCoreError::InvalidAuthority.into());
+                        }
+                    }
                     plugin.plugin.manager()
                 } else {
                     plugin.authority.unwrap_or(plugin.plugin.manager())