Permission check fixed on ticket controller