title: Is granting user permissions to specific mySQL table good security practice?
body: <p>I've been working on a custom application for a friend's Joomla web site. It's not a component, it's
  a standalone PHP / mySQL app that is pulled into a specific article via a PHP include. </p>
  
  <p>The data for the app, however, does reside in the same database used by the rest of the site. It sits in its own table within the database, however.</p>
  
  <p>Many of you have been very helpful in pointing out security holes in my code and, since I've found that I can't use a separate database, would it be a good idea from a security standpoint to create a new user and assign it access to ONLY the table used by this app?</p>
  
  <p>I already know <em>how</em> to do it, just trying to decide if I <em>should</em> do it.</p>