Greetings,
The way permissions on catalog objects are handled isn't discussed atall in the documentation. Barring objections, I'll commit andback-patch the attached to improve that situation in the next day or so.
Thanks!
Stephen