Restrict actions in TicketsController based on permissions on hide links