Restricts actions in the TicketsController based on permissions and hides links