Rights check on RetrieveAllowedMetaData

Check the documentation, unit tests, and expected access rights against the actual behavior of RetrieveAllowedMetaData.

See #676 for the context and further instructions on how to check.