Don't grant user access directly to tables within the APPLICATION.
INSTEAD grant the ability to access the procedures thataccess the tables.When PROCEDURE executed it will execute the PRIVILEGE of procedures OWNER. Users cannot access tables except via the procedure.