Restricting creating tickets to only users have permissions