The users can SEE the INFORMATION_SCHEMA, but, they get DENIED when they query INFORMATION_SCHEMA if you deny SELECT on those SCHEMA.