refactor view_tickets permission