i believe that the role granted unlimited tablespace to the user -- revoking it removed that privilege, but the user probably left tables in a TS they then had no quota on