Edit access conditions.
Allow team leaders to add and modify tools.
Only allow works to be set to collections the user is in, plus various.
Merge pull request #901 from nla/bug/acm-DSC-797

dsc-797: Update various security issues.