Restrict reading tickets to the correct project scope