restrict actions in Tickets Controller based on permissions and hide links