Restrict actions in Tickets controller based on permissions and hide links