Restrict action in TicketController based on permissions and hide links