restricting deleting tickets action to only people with permission