restrict reading tickets to correct projects scope