I talked in length about MY personal belief that not only is showing "access denied" tickets OK but it's desirable. Either way it's highly debatable and I can see the other side of the argument, but if you want more reasoning from a Q/A guy's perspective check this out.

http://forums.cerb4.com/showpost.php?p=13101&postcount=4

Solution in http://www.wgmdev.com/jira/browse/CHD-1506 seems acceptable for me. But if we have more then 70k tickets in our groups (one primary first-line support group with 30k and some secondary-line support group with relative small numbers of tickets) searching for second-line support is really cumbersome. And even then: what the point if they know that ticket exists in some other queue: they should call engineers from other queue by the phone and convience them to send those ticket to them by email? But they even does not known if this is right ticket 'cause they don't have peek ability.