Im creating a SharePoint application where a user puts their tickets. The ticket will be restricted by permissions to only be accessible by the creator, assignee and group of users which are responsible to assigning tasks.

The company is big and therefore managers need to have access to tickets which are submited by their employees. I can write an event handler which adds all required permissions to a concrete list item. But there is a problem with the manager. The manager of the user can change in time, because of that I cannot make easy access rights to the user's manager.

I need something more than permissions on a list item. I need security layer or something simular. Is there any possibility to implement permission for manager of creator?