restrict creating tickets