Remove has_access methods, add study_id properties
Do study access check in handler
Add tests for study_id properties