Restring creating tickets to only users who have permissions to do it