Check study access rights and study exists

 Fix #445
@squirrelo you don't need to import anything here... You already have the user object, so you can call the functions that @adamrp is suggesting - you can also do `self.get_public`