Note, that the dependency graph of tickets generated by the
trac-mastertickets plugin might be visible to users who have normally
no permission to see the respective tickets. This is especially
problematic, when you are using trac-privatetickets or
trac-sensitivetickets. If unsure, don't activate the mastertickets in
projects with sensitive tickets and the possibility of unauthorised
access to trac.

See http://bugs.debian.org/667720
