I recommend to use TicketAcl. Example is attached.