change the permission_class of ticket api