restrict creating tickets to users with permissions