Users and privileges
Keep root for administration
Keep the powerful root account away from application traffic and separate row access from schema migration responsibility.
8 minute lesson
~~~
The MySQL root account can change users, permissions, databases, and server configuration. A bug running through that account can damage far more than one application.
Use one account for the running application and another for schema migrations. The application account changes rows. The migration account changes table structure.
Lesson completed