Restrict ticket updating to only those who have permissions