DEFAULT ROLE issue or feature?

@all

Hi @all,

I've an interesting case about security.

Steps to reproduce:

Import with impdp a user, wich has the DBA Role assigned in source.

Import was successfull. After I have had a look at the imported user I've seen the DBA-Role assigned. So far, the DBA is unessesary (it was an developer Dump ) and I performed a REVOKE DBA and assign CONNECT and RESOURCE. But theese roles had no affect. Only after explicit assigning of "CREATE SESSION" I could connect to the instance.

The cause:

I extracted the imported dump to a DDL-File. I disscovered a statement ALTER USER *** DEFAULT ROLE