Restrict actions in TicketsController based
on permissions and hide links