An authenticated user with the operator role can access the `get-orbital-sources` Socket.IO handler, which is also exposed as `get-tle-sources`. This handler lacks proper restriction to administrators, allowing unauthorized users to retrieve plaintext usernames, passwords, and tokens stored by administrators for basic and token orbital sources.