Restrict destroy action to only people with permission.
Restrict actions in the TicketsController based on permissions and hide links.