Informix security questions

I have two basic security questions about Informix: 1. Is it true that if a user has execute permission on a stored proc, then the stored proc will be allowed to perform any table reads or updates (regardless of the original user's security profile). In other words, stored procedures are not "held back" by the initiating users' security level. 2. Does Informix support specifying security down to the column level?