"Quiroga, Damian" <damian.quiroga@intel.com> writes:
> I've tried something like "REVOKE EXECUTE ON FUNCTION version() FROM someuser;" and it doesn't work.
> Apparently you can only revoke permissions that you have explicitly granted before.
The default behavior for built-in functions is as though the bootstrap
superuser has granted execute access to PUBLIC. You would need to
reverse that (and then grant it back to any non-superusers who
should have it).
regards, tom lane