add multi-file upload ability for tickets
restrict access to assets