update authorization logic for metadata file creation; closes #1225