I am looking for a tool that would monitor what privileges are being used, and then a 2nd tool to consolidate them into one GRANT command.

Here is why:

I keep coming across 3rd/4th party docs that say things like:

grant all privileges on *.* to 'django_user'@'localhost' identified by "swordfish" with grant option;

And that user ends up being both the 'admin' user and the day-to-day dataIO user, with 0.0 concern for security. So I send a message to the people that should know: "what privs are needed for the various steps?" and have yet to ever get an answer.

Which makes me want to figure it out for myself, and then I can send a message "please include this in your docs:..." but I really don't want to comb though source code, I would rather just setup a user with "all privileges on *.*" then run the "setup db scripts" and see what privs were actually used.

Does anything like this exist?

Carl K