Best practices for MySQL accounts/permissions?

[Josh]

Hello,

Reading the roller directions, it appears that the mysql user has all
privileges on the rollerdb database.  Is this typically how people run?  Are
these the best practices?