Tom Lane wrote:
> The question in my mind is what privilege to check and when.
By extrapolation of the SQL standard, I'd say we'd need to check the
EXECUTE privilege of the function at run time.
--
Peter Eisentraut
http://developer.postgresql.org/~petere/