Added the list of access permissions. Per-step yet to be done, but study-level access is now consistent and tested. More or less.