Restricting creating tickets to only uses who have permissions to do it (p 215)