Granting this(just giving create any session)permission will in turn grant the user to drop any table...which is created by system user.. check it out...