Restrict actions in TicketsController
    based on permissions and hide links