Improving user class

Now more functions get exposed with proper permissions
Make use of getOperator
Secure getOperator to only be able to request OWNER