Restrict user reading tickets to project scope