remove hard cording of sql user privileges