Update Spring
Restrict creating tickets to only users who have permissions to do it
Restrict tickets updating to only those who have permission
Restrict actions to TicketsController based on permissions and hide links