restrict ticket creation to users with permission