Restrict ticket updating to only those with permission