Redmine

Hi experts,
if a ticket is closed I want that this ticket can't be changed by a normal user.
He should also not be allowed to type in any working hours.

How can I achive this?
I couldn't find anything in the settings.

TIA Stephan