Write a packaged procedure to do the job for them and grant execute access to them. The procedure will run with owner rights (by default) allowing them to perform the action as if they were SYS, but what they do will be limited by the procedure you code.

Cheers

Tim...

PS. I'm with Mr Hanky! Shoot them