restricting reading tickets to correct project scope
permissions for create, update, destroy tickets