David Christensen <david@endpoint.com> writes:
> In doing a schema upgrade, we noticed the following behavior, which certainly seems like a bug. Steps to reproduce:
> ...
> The bug in this case is that "b" has full permissions on all of the
> underlying tables, but runs into issues when trying to access the
> referenced tables.
Permissions checks for RI operations involve the owner of the table,
from whom you've revoked all permissions. If the RI operations were
done as the caller, as you seem to expect, that would *not* be an
improvement; callers would have to have more privileges than one really
wants.
regards, tom lane