user cannot edit ticket w/out permisison