prevent unauthorized users from deleting tickets