Restrict access in TicketsController based on permissions and hide links.