Restrict actions in TicketsCOntroller based on permissions and hide links