In general, a user without any role shouldn’t have access to see any tickets at all. If the user can see tickets from other users in the core UI, then it sounds like some custom development that has been done on your instance.
If my answer has helped with your question, please mark my answer as the accepted solution and give a thumbs up.
