I wasn't terribly imeepssrd with the list either. I agree with your points, especially about sticking to ANSI good Lord, how many times do we have to go over that? For those few operations that need to happen at the file-system level, the DBA should login as the MySQL user. No. The MySQL user shouldn't be allowed to log in. That's pretty basic.