I created one user. This user has only "create session" privilege.
However, this user able to update a table.
Case:
SQL> CREATE USER <USERNAME> IDENTIFIED BY <PASSWORD>;
SQL> GRANT CREATE SESSION TO <USERNAME>
Login to new user :
SQL> SELECT * FROM <TABLE_NAME> WHERE <COLUMNID>='325';
1 row returned.
SQL> UPDATE <TABLENAME> SET <COLUMNNAME>='XYZ' where <COLUMNID>='325';
1 row updated.
What could be the cause here? How to approach this.