Restrict actions in TicketsController based on permissions an hide links