Restrict actions in TicketsController based on authorization and hide respective links