restrict reading tickets to correct project scope