restrict ticket update to only users with permission