The previous code would erroneously include ticket counts from the user's
organization even if the user did not have access to them.