Restrict ticket updating to only those who have permission
Restrict destroy action to only people with permission