If you create a user using security manager. that user is granted CONNECT role by default. Revoke it. Grant the privileges CREATE SESSION & SELECT ANY TABLE.