Analyse SCS Ops Tooling Implementation for security weaknesses

[garloff]

As an SCS operator, I want to be sure that the implementation of the Operational Tools from SCS does not contain flaws that would allow users to escalate privileges, impersonate others or otherwise get access to information not intended for them.
(This is the implementation part corresponding to #394.)