When I log into cPanel, I go to create a new MySQL Database with the wizard. Usually, it is recommended to assign the database user with all of the permissions from Insert, Update, Alter, Execute, etc. in the list. This has gotten me thinking.
Please note: When I build my applications, all the permissions that are required is Insert, Update, Delete, Select and Alter. Which is very reasonable for doing everything we want to displaying data, and interacting with it.
When do we ever want to actually allow an web application such as a simple PHP CRUD to execute, drop, create, trigger, and a few other privileges? Would that be more of a security threat to MySQL and our database?