restricting reading tickets to correct project scope
restricting permissions to create tickets to only users that have permission to do that