Restrict actions in TicketsController based
                      on permissions and hide links