If EXECUTE is really supposed to be required; is it a bug that I
finally got regexp_replace() to work...?
The PUBLIC pseudo-role is granted permission, at the time of the function’s creation (i.e., as a default privilege) to execute all functions in the database. All roles inherit the grants given to PUBLIC.
David J.