Limit ability to change ticket states to users with permission