New studies endpoint implementation doesn't filter out private studies #11672
Description
Clickhousified studies endpoint returns studies that should be private. You can see this by comparing the result of legacy and new on the genie portal. The new endpoint returns 10 more studies.
curl 'https://genie.cbioportal.org/api/column-store/studies?projection=DETAILED' \
-H 'accept: application/json' \
-H 'accept-language: en-US,en;q=0.9' \
-b '_ga_HEJSRG35RS=GS2.1.s1755377141$o5$g0$t1755377141$j60$l0$h0; _gid=GA1.2.946355236.1755697358; _ga_5260NDGD6Z=GS2.1.s1755703908$o48$g0$t1755703908$j60$l0$h0; _ga_334HHWHCPJ=GS2.1.s1755705998$o11$g0$t1755705998$j60$l0$h0; _ga=GA1.1.1472664077.1753383550; SESSION=NjdmMTliMzItOWVkZC00MTczLTllODctMWQyMGU3ODdmMjVl; _cs_c=0; _hp2_ses_props.69218401=%7B%22ts%22%3A1755706054794%2C%22d%22%3A%22genie.cbioportal.org%22%2C%22h%22%3A%22%2F%22%2C%22q%22%3A%22%3Fcontinue%22%7D; _hp2_id.69218401=%7B%22userId%22%3A%221158880748467679%22%2C%22pageviewId%22%3A%223953766701970672%22%2C%22sessionId%22%3A%221402353867065187%22%2C%22identity%22%3A%221158880748467679%22%2C%22trackerVersion%22%3A%224.0%22%2C%22identityField%22%3Anull%2C%22isIdentified%22%3A1%7D; _cs_id=d5aef454-c1c1-a630-951c-4092a655bde0.1755706055.1.1755706650.1755706055.1755696908.1789870055080.1.x; _cs_s=4.0.U.9.1755708451011; _ga_ET18FDC3P1=GS2.1.s1755706054$o12$g1$t1755706651$j59$l0$h0' \
-H 'priority: u=1, i' \
-H 'referer: https://genie.cbioportal.org/?continue' \
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Google Chrome";v="139", "Chromium";v="139"' \
-H 'sec-ch-ua-mobile: ?0' \
-H 'sec-ch-ua-platform: "macOS"' \
-H 'sec-fetch-dest: empty' \
-H 'sec-fetch-mode: cors' \
-H 'sec-fetch-site: same-origin' \
-H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36'