Restricting creating tickets to only users who have permissions to do it
Restricting ticket updating to only those who have permission