Re: Create user with no privs but CREATE SESSION and he can see things in SYS?

craig.drabik_at_gmail.com wrote:
> Hi all. Probably a newbie question here, but anyways.. If I do:
>
> CREATE USER test IDENTIFIED BY test;
> GRANT CONNECT TO test;
>
> And then connect to the DB as test in TOAD, I can see a bunch of things
> in the SYS schema - things like AUDIT_ACTIONS, ODCI_SECOBJ$,
> OLAPI_HISTORY, etc. Probably about 30 tables in all. Why is the user
> allowed to see them? Does it matter? Can I just REVOKE SELECT ON...?
>
> Thanks in advance...

Go with Frank's answer but you should grant CREATE SESSION, not CONNECT. Also you not granted access to the TEMP tablespace which may be an issue depending on what you are doing.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org