Restricting ticket updating to only those who permission