Restrict actions on TicketsController based on permissions and hide links.