问题在于建立SDE用户的时候赋予了DBA角色和GRANT SELECT ANY TABLE TO "SDE" WITH ADMIN OPTION;,如果把这两项权限撤销,则不会出现以上的问题.
查看SDE用户的权限：
select privilege from dba_sys_privs where grantee='SDE'
union
select privilege from dba_sys_privs where grantee in (select granted_role from dba_role_privs where grantee='SDE' );
ESRI的工程师安装以后，只有如下15个权限：
1 ADMINISTER DATABASE TRIGGER
2 CREATE CLUSTER
3 CREATE INDEXTYPE
4 CREATE LIBRARY
5 CREATE OPERATOR
6 CREATE PROCEDURE
7 CREATE PUBLIC SYNONYM
8 CREATE SEQUENCE
9 CREATE SESSION
10 CREATE TABLE
11 CREATE TRIGGER
12 CREATE TYPE
13 CREATE VIEW
14 DROP PUBLIC SYNONYM
15 UNLIMITED TABLESPACE
而一般我们自己安装的时候，则权限多了不少。执行一下revoke SELECT ANY TABLE from sde就OK了。