title: Should each user get his own database user/password when they use a single app?
body: <p>What I am trying to ask is  ...</p>
  
  <p>Users will only ever access the database via my application. The application itself allows an admin user to create/modify/delete users and give them certain privileges. So, I have a table which contains each users log-in name &amp; password.</p>
  
  <p>I am still developing the app, so it currently logs in as root with no password. Obviously, I will change that, but what's the best practise? Should I have a single database user &amp; password which the application uses, or should I create a separate user for the databaase each time a user for the application is created (or modified)? The latter seems like more work.</p>