Add custom index controller like clinepi?

[asizemore]

Clinepi uses a custom controller that allows it to use the study-data-access permissions functions. Should we add this here?

Currently we see no errors because of a short-circuiting in DataRestrictionUtils . Probably best not to rely on this method moving forward.