I just got WP running on my own server. I am not trying to lock things down more. What permissions should the db user have to my WP db?
I've asked a similar but a bit more detailed question lately: MySQL Database User: Which Privileges are needed?
The short installation instruction for WordPress ("5 Minutes") state that:
This is the minimum of privileges / permissions that are needed and next to those, others are not needed.
So if your user has more privileges than those, you can reduce them.
WordPress only uses one DB user for everything, and he'll need to have all permissions to the database. CREATE and ALTER are used when upgrading, sometimes. INSERT, UPDATE, and SELECT are used all the time.