Check study access rights and study exists

 Fix #445
Might this be a function that would be better implemented in the `QiitaObject` class with a `user_id` parameter, and then is left to subclasses to implement?