The Principle of Least Privilege in Databases

Restrict the application user's DB access to only the tables required for authentication.