you cant do that if user has resource role since it has this unlimited tablespace system privilege...