The settings in apps/search/metadata/local.meta are respected half way. You can add an access-line within the stanza for an external database connection
[database/MyDB]
access = read : [ admin, db_admin ]
At least Splunk respects the read permissions while you edit the settings. E.g. if a user has no read access, he does not see the configured connection underneath External Databases
A lack of read permissions does not stop the user from using the external database within dbquery, though.
... View more