Providing MySQL users with just the minimum privileges
问题 For a web application, when creating the user which will connect to the MySQL database, you have the choice of privileges. Assuming that the only actions intended to be done by that user are SELECT/INSERT/UPDATE/DELETE, it seems to make sense to only provide those privileges, however I've never seen that recommended anywhere - what are the reasons for and against this method? 回答1: There are other privileges that a user might need during an ordinary application, for example: CREATE TEMPORARY