Restrict actions in TicketsController
➥based on permissions and hide links