restrict creating tickets to only users who have permission to do it