In 1.6ST
Clients only have access to see the tickets that they have opened.
Staff can see whatever tickets are A. assigned to them, B. not assigned to anyone, C. assigned to their department.
I'm not aware of any settings that would change this behavior. You could modify the project source to change it if you are well versed in PHP/MySQL.