added EXTRA_FILTER permission

added EXTRA_FILTER permission to give an opportunity to view all tickets excepts given dep (dkis for now) to a certain user