diff --git a/doc/TODO b/doc/TODO
index 669b00734d..3fceb499ba 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -2,7 +2,7 @@
 PostgreSQL TODO List
 ====================
 Current maintainer:	Bruce Momjian (bruce@momjian.us)
-Last updated:		Wed Jan 31 23:49:39 EST 2007
+Last updated:		Wed Jan 31 23:50:55 EST 2007
 
 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -353,6 +353,11 @@ Functions
 
   http://archives.postgresql.org/pgsql-hackers/2007-01/msg01403.php
 
+* Tighten function permission checks
+
+  http://archives.postgresql.org/pgsql-hackers/2006-12/msg00564.php
+
+
 
 Multi-Language Support
 ======================
diff --git a/doc/src/FAQ/TODO.html b/doc/src/FAQ/TODO.html
index a4f2dc5521..e1d00f05ba 100644
--- a/doc/src/FAQ/TODO.html
+++ b/doc/src/FAQ/TODO.html
@@ -8,7 +8,7 @@
 <body bgcolor="#FFFFFF" text="#000000" link="#FF0000" vlink="#A00000" alink="#0000FF">
 <h1><a name="section_1">PostgreSQL TODO List</a></h1>
 <p>Current maintainer:     Bruce Momjian (<a href="mailto:bruce@momjian.us">bruce@momjian.us</a>)<br/>
-Last updated:           Wed Jan 31 23:49:39 EST 2007
+Last updated:           Wed Jan 31 23:50:55 EST 2007
 </p>
 <p>The most recent version of this document can be viewed at<br/>
 <a href="http://www.postgresql.org/docs/faqs.TODO.html">http://www.postgresql.org/docs/faqs.TODO.html</a>.
@@ -324,6 +324,9 @@ first.  There is also a developer's wiki at<br/>
   </li><li>Enforce typmod for function inputs, function results and parameters for
   spi_prepare'd statements called from PLs
 <p>  <a href="http://archives.postgresql.org/pgsql-hackers/2007-01/msg01403.php">http://archives.postgresql.org/pgsql-hackers/2007-01/msg01403.php</a>
+</p>
+  </li><li>Tighten function permission checks
+<p>  <a href="http://archives.postgresql.org/pgsql-hackers/2006-12/msg00564.php">http://archives.postgresql.org/pgsql-hackers/2006-12/msg00564.php</a>
 </p>
 </li></ul>
 <h1><a name="section_6">Multi-Language Support</a></h1>
