convert getTicketList to interface rather than security context directly