Restrict reading tickets to correct project scope.
Restrict creating tickets to only users who have permissions to do so.
Restrict ticket updating to only those who have access to do so.
Restrict destroy action to only the people with permission.
Restrict actions in TicketController based on permissions and hide links.'
Merge pull request #1 from kmohr/master

Updates through 8.8