Implement access checks for QueryResult creation and retrieval

See companion pull request: https://github.com/thehyve/transmart-core-api/pull/18