Oracle provides user profiles to control virtually everything the user can do within the database, including CPU time and connect time. With it, you should be able to closely control what these ad-hoc queries can do, and avoid problems.