My feeling is that if an application has any more than (at the most) read/write privs, then the application is incorrectly written. The application should be calling on prived stored procedures to do the job safely.
--Jeff Moden
Change is inevitable... Change for the better is not.