I mean that my finding query still reports that the public role still has SELECT permissions to the objects which were denied/revoked. In effect, the public role does not actually have these permissions and I have proven this on my system (I get similar errors to you when performing the SELECTs). So, it seems that the query is reporting permissions incorrectly. I don't have this issue with revoking permissions with any other database and can't recreate it with a new database.