I agree with hotcocoa,
There is missing some security with the tickets...
It is not acceptable that another user could view a ticket that is not his.
Also, an admin need to see a ticket in the backend side, not from the user perspective.
Well, I am not fully aware of what exist or not in the plugin, but I have some ideas.
What I propose is, aggregate the user ID to the ticket.
In a multi-admin environment it would be a nice idea. When an admin take a "open" ticket to solve, his ID is aggregated to it, and the same happen to the user who started the ticket, this means that when the user start the ticket, he need to be loged in. When a ticket is taken by one admin, the ticket goes to "solving" state, this ticket cant be seen to the others admin. Only when the currently admin leave this ticket, and the ticket goes to "unsolved" state. For "open" and "unsolved" ticket states, there could be some notification in the dashboard, only for admins, and a message asking for admins to take the ticket to solve.