"Restrict reading tickets to correct project scope
added authorize_create!