grant diag tool

[Carl Karsten]

I am looking for a tool that would monitor what privileges are being used, and 
then a 2nd tool to consolidate them into one GRANT command.

Here is why:

I keep coming across 3rd/4th party docs that say things like:

grant all privileges on *.* to
'django_user'@'localhost' identified by
"swordfish" with grant option;

And that user ends up being both the 'admin' user and the day-to-day dataIO 
user, with 0.0 concern for security.   So I send a message to the people that 
should know: "what privs are needed for the various steps?"  and have yet to 
ever get an answer.

Which makes me want to figure it out for myself, and then I can send a message 
"please include this in your docs:..."  but I really don't want to comb though 
source code, I would rather just setup a user with "all privileges on *.*" then 
run the "setup db scripts" and see what privs were actually used.

Does anything like this exist?

Carl K