Note, that the dependency graph of tickets generated by the trac-mastertickets plugin might be visible to users who have normally no permission to see the respective tickets. This is especially problematic, when you are using trac-privatetickets or trac-sensitivetickets. If unsure, don't activate the mastertickets in projects with sensitive tickets and the possibility of unauthorised access to trac. See http://bugs.debian.org/667720