Restrict ticket update to only authorized users