restrict actions in tickets on permissions and hide links