Restrict actions in TicketsControler based on permissions and hide links