Restrict actions in TicketController based on permissions and hid links