Restrict actions in TicketsController based
               on permissions and hide links