restricting creating tickets only to users who have permissions to do it