addressing comments
move access check to Study and update handler