Policy only create via relationship

How to make policy for allowing create only via relationship.

For example: orders has many tickets.

Ticket can only created in the relationship page,