fix: prevent users from choosing an arbitrary group for filters

Bengfort requested to merge sec-fix-filter-group-validation into main

This is a security issue because users were able to select groups from other studies, bypassing permission checks.

Merge request reports