Per code comment, allowing CanCan to control access instead of explicitly scoping this because in some instances scoping is incorrect, specifically when a provider can access the tickets of related providers to add claims.