I have 'visitors can create ticket' set to no.
but they still access to the control panel.
worst still is if they then click on create ticket, they have access to every thing,
Internal Note, Assign to, User search
The page is completely different when a registered user signs in.