User permissions for StudyDataRequest

User permissions for StudyDataRequest.
Added a decorator and unit tests for this purpose.
User permissions were already in  place from the user interface, but all data was accessible
from the rest api, this is now no longer the case.