At 23:13 14/08/2008, you wrote:

>This is what I have tried.
>
>1. Created new user/password using gsec.
>2. Created new database using the new user as the owner.
>
>But, I can still connect to this new database using SYSDBA/masterkey credential. Am I missing anything?

Yes, you've missed the point that SYSDBA has full destructive rights to ALL databases on the server. The Owner has similar rights only to the database it owns (but it can't operate on the security database: only SYSDBA can do that.)
And you might also have missed the point that the database owner doesn't have any privileges to any objects that were created by another user, including SYSDBA - SO MAKE SURE YOU LOG IN AS OWNER WHEN YOU CREATE OR ALTER OBJECTS !!

./heLen