Restrict ticket updating only to those who has permission