Why the downvotes? It is common sense to not run software with more permissions than it needs. Your production app shouldn't connect to your database through th

Why the downvotes? It is common sense to not run software with more permissions than it needs. Your production app shouldn't connect to your database through the root account, for example, unless it needs full, complete permissions to function. Not likely. Of course, this does not eliminate the need for solid code-based prevention of injections...