PostgreSQL Role Can Read Database Structure Without Accessing Data

A PostgreSQL role can be configured to read a database's complete schema without accessing any actual data rows. This is achieved by granting only CONNECT on the database and USAGE on the schema while granting no permissions on the tables. The role can then view structural information from the pg_catalog system tables while every SELECT query on data tables fails with permission denied. This approach prevents tools from accessing sensitive customer data while still allowing schema analysis. The configuration requires revoking EXECUTE permissions from PUBLIC on SECURITY DEFINER functions that might bypass these restrictions.