Restrict creating tickets to authorized users