Only users who have permissions can call :new and :create actions on tickets