Alternatively, just revoke UNLIMITED TABLESPACE after that. Also, have you ever wonder why CONNECT role contains more that just CREATE SESSION privilege?
SQL> select privilege from dba_sys_privs where grantee='CONNECT';
PRIVILEGE ---------------------------------------- CREATE VIEW CREATE TABLE ALTER SESSION CREATE CLUSTER CREATE SESSION CREATE SYNONYM CREATE SEQUENCE CREATE DATABASE LINK
not a bug and definietly not a phenomena. It has been this way for years. When you grant the resource role, you explicitly get granted the unlimited tablespace privelege.
Documented, known and understood, if you dont like it - dont assign anyone resource
On 31/10/06, ?? ? <jerrysun1981@xxxxxxxxxxx> wrote: > > problem comes out, why and when the "UNLIMITED TABLESPACE" privilege was > granted to user "TEST", i am sure that the "UNLIMITED TABLESPACE" here > derive from "RESOURCE" role, anybody has any idea about this phenomena? is > this a oracle bug ? > > thanks in advance, and sorry for my poor english >
-- Best regards, Alex Gorbachev
The Pythian Group Sr. Oracle DBA
http://www.pythian.com/blogs/author/alex/ http://blog.oracloid.com -- //www.freelists.org/webpage/oracle-l