Restrict actions in TicketsController based on permission and hide links