"Greg Steffensen" <greg.steffensen@gmail.com> writes:
> Hey, I'm slightly confused about how the permission checking is done
> when executing functions. Basically, users that I've never granted
> execution permissions to are able to execute functions.
You didn't read the part of the GRANT man page that says that functions
have execute permissions granted to PUBLIC by default.
You can revoke that if you don't like it.
regards, tom lane