Restrict actions in teh TicketsController based on permissions and hide links