restrict tickets reading to correct project scope