User with all privileges on a database can create new ones?

Hello,

I’m messing around with PortableApps/ XAMPP from a usb drive for the moment, and I was setting up a database for use while working my way through a book (Head First PHP & MySQL). In the past I’ve just used phpMyAdmin to create a new user and a new database with the same name and all privileges therein. This time, because I get tired of fiddling the db name, user name and password from the default for the tutorial files, I decided to create a new database with the same name as in the book, then creat a new user with the same name as in the book, same password, etc. and then granted that user all privileges on that database. Specifically, this is the SQL code that phpMyAdmin generated:

create the new db:

CREATE DATABASE `elvis_store` ;

then create the new user with all privileges on that same database:

CREATE USER 'elmer'@'localhost' IDENTIFIED BY '***';

GRANT USAGE ON * . * TO 'elmer'@'localhost' IDENTIFIED BY '***' WITH MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0 ;

GRANT ALL PRIVILEGES ON `elvis_store` . * TO 'elmer'@'localhost';

The part that seems odd is… when I log out as ‘root’ and log back in as the new user (‘elmer’), I see a fairly abbreviated version of the phpMyAdmin control panel screen… but right there up front I see the option to create a new database (tested it and the new user can indeed create new databases at will). I guess I wouldn’t have expected a user with all privileges on one database to be able to create more databases… seems kind of dangerous perhaps?

Am I missing something stunningly obvious here, or is this the way this is supposed to work? Also… the user can create databases, but can’t drop (delete) them?

Thanks,

Monte