Restrict reading tickets to correct project scope
Restrict creating tickets to only users
               who have permissions to do it