Prevent granting of privileges that have WITH GRANT option

select grantee||': '||owner||'.'||table_name from dba_tab_privs
where grantable='YES'
and owner not in ('SYS','MDSYS','ORDPLUGINS',
'ORDSYS','SYSTEM','WMSYS','XDB','LBACSYS')
and grantee not in (select grantee from dba_role_privs where granted_role='DBA')
order by grantee;