On Apr 23, 11:04 am, "Peter H. Coffin" <hell...@ninehells.com> wrote:

> In case you're not sure about it, the GRANT USAGE means no privs except
> those explicitly assigned [1]. This user can manipulate data only, not
> structure, yet has no trouble using those functions you seem to think
> would not be accessable to a restricted role user ID.
>
> I am glad you posted here. You will have an opportunity to reassess some
> of your security strategy.

Thanks for pointing this out, Peter. I was totally blind to this.