security documentation - Mailing list pgsql-general

The security documentation available in the official documentation is rather sparse. Is there a more detailed document I should be aware of?

As an example, I'd like to prevent a a user from being able to get a list of existing databases. Presumably, I can limit access to various system catalogs to prevent this sort of thing, but if existing documentation exists it might prevent me from shooting myself in the foot too badly.

pgsql-general by date:

Previous
From: "A. Kretschmer"
Date:
Subject: Re: pl/pgsql function debugging
Next
From: Scott Marlowe
Date:
Subject: Re: Does copy abort on a failed insertion?