RCA tickets, enforce user restrictions

We need the RCA tickets system to enforce the restrictions set for our users.

Currently a user restricted to product group A, and level B, can see every ticket, even though they're tagged with different levels and product groups.

Also, when creating an RCA ticket from scratch, it would be nice if the tag values would also be a dropdown (an example is "level", which is currently just a text field.