fix: prevent users from choosing an arbitrary group for filters

This is a security issue because users were able to select groups from
other studies, bypassing permission checks.