Mark Diener wrote:
> It seems the EXECUTE privilege is not the only privilege that is
> being checked during the execution of a PL/psql procedure
> language/function.
The EXECUTE privilege is checked before the function is executed.
During the execution of a function, you still need for each operation
the privileges that are ordinarily required for that operation. If you
want to have the function executed with the effective privileges of its
owner, you can specify the clause SECURITY DEFINER when creating the
function.
--
Peter Eisentraut
http://developer.postgresql.org/~petere/