You can also assign a quota of zero to ensure a user can not create any objects in a particular tablespace, including system.

alter user username quota 0 on system;