Database roles seems like its not working for me - your help is appreciated

Question

Hi,
I am using database 10g express edition.
I am using sql developer to connect to database.
I have 2 database connections,
one is called TCF and has a user called oracle.
two is called TCF_TEST and has a user called smith.
oracle user has privileges to do anything.
smith user has privileges to only connect, and something called resources.
I logged in to the database using oracle and gave the following command:
CREATE ROLE TCF_R;
GRANT SELECT ON EMP_IOD TO TCF_R;
GRANT TCF_R TO SMITH;Then I logged in as smith and was able to create a table.
first of all, the user does not have any privileges to create a table.
Second, when creating a table, smith can insert, update, delete records which also smith does not have any privileges to do.
so basically this whole thing is not working the way I want.
what am I doing wrong and what do I do to fix it ??
Thanks,
if you need more info, please let me know so I can provide it.

Answer 1

hey 009,
thanks for your help,
ok this is what I did step by step:
first , I created a user and granted create session to that user as below
CREATE USER SMITH IDENTIFIED BY SMITH;
GRANT CREATE SESSION TO SMITH;Then I logged in and gave SMITH privilege to create tables. (the reason for this is only for testing, I create a table and then I want to check if SMITH can drop it later on).
Then I created one table.
then Revoked the create table privilege from SMITH, log out, log back in and tested to make sure SMITH cannot create tables.
up to here everything is successfull.
Now since SMITH only has the following privileges which is only create session:
Privilege     Admin Option     From Role
CREATE SESSION          -
          1 - 1      
it should not drop, insert , or update any table, or even select because I did not give it any grants.
but its doing all of the above.