Hello Mike,
Yes, you can restrict the database user and mojoPortal will still function properly. All included mojoPortal features use Stored Procedures so you should be able to limit the user to executing SPs. When you want to run Setup (for upgrades), you'll need to either switch to a different user account or change the permissions on the existing account because Setup will need to adjust the schema.
Hope this helps,
Joe