Restrict actions in TicketsController based on permssions and hide links