Add ability to edit and update users
Add feature for deleting users, including protection against self-deletion
Make projects only visible to users with permission to see them
Don’t show projects that a user doesn't have permission to see
Restrict reading tickets to correct project scope
Restrict creating tickets to only users who have permissions to do it
Restrict ticket updating to only those who have permission