Applying the Principle of Least Privilege, the database user shouldn't even have DDL rights.