Restrict creating ticket updating to only users who have permissions