A great article! It made me realize that I need to be much more careful in setting up restrictions for PostgreSQL users (i.e., client applications).