From what I see, as long as the user has permission to work/resolve the ticket, they should be able to create a subtask. Check the permissions on the ticket itself and see if the user or a group they are a member of has the Can Edit permission. I can't remember if Can Administrate is required for this functionality but it might be.