This is not done at the connection level; grant the user in question only SELECT privileges and revoke INSERT, UPDATE, and DELETE privileges. This is assuming that the user does not have implicit authorities such as DBADM or SYSADM, which override individual object grants.