Option #1: Look up the PRODUCT_USER_PROFILE in the Oracle doc.
Option #2: Don't give them access to SQLPlus, SQLNet/Net8, or similar tools. Not the best solution, but good enough for some environments.
-- Michael
Darkstreak Computing & Innovations
www.darkstreak.com