Geeks With Blogs
Thorvald Bøe
An interesting thing about default settings in SharePoint 2013 (and maybe previous versons as well) is the way that default permissions are set up. Consider this scenario:
-You want to divide your users in two groups, administrators and contributors, where admins have full access and contributors can only view and edit list and document library contents

You check out the default security groups, and it turns out there are two groups that covers exactly what you want. So you just assign admins to the owners group and contributors to the members group, and then you're done, right? Wrong!

What you will find out when you test this by logging in as a test user with the contributor rights (which you of course do, right?) is that the user can actually edit pages. In fact, he can actually modify and delete all pages on your site, he can add and remove web parts to the pages and basically wreck havoc to your site if he doesn't know what he is doing (or maybe he does..).

At first, this doesn't make sense, because the contributor permission explicitly states that it grants permission to read and modify list and document library contents. The explanation is that the site pages actually come from a library themselves - the site pages library. Understanding this, the fix is simple: Modify the site pages library permissions to remove the contribute right for contributors on the site:

Go to library settings for site pages:


Go to permissions:

Stop inheriting permissions:


Select the members group and edit the permissions:

Finally, remove the tickmark from the "contribute" permission, and you're done!



Posted on Sunday, February 2, 2014 9:37 AM sharepoint , permissions , security | Back to top


Comments on this post: Stop contributors from editing pages in SharePoint 2013

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
Thanks. This worked perfectly. Must better option that using CSS and editing master pages.

Cheers,
Vishawjeet
Left by Vishawjeet on Jul 17, 2014 11:27 AM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
I came to the same conclusion as above, but am discouraged that this is the only way to prevent contributors from editing pages (and deleting webparts). It seems unrealistic to have to do this for every Site Pages library.
Left by Karlene on Aug 15, 2014 9:02 PM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
I couldn't agree more, Karlene! :-)
Left by Thorvald on Aug 20, 2014 11:53 AM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
So easy...thanks for the heads up!!
Left by Warren on Jan 27, 2015 5:48 PM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
This does seem to be the only option to the dilemma... however, when users then request access to a site using the full url eg: http://teamsite/pages/default.aspx, it actually requests access to the pages library and not the site as a whole. So when owners accept the request, they may be unknowingly only providing access to the pages library and not the site. So you then have to disable access requests to alleviate this. So annoying.

Sometimes there just seems to be no winning against sharepoint. It thwarts you at every turn.

Left by Palle on Sep 02, 2015 2:37 AM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
Thanks for the article! worked as desired.

it may be of use to someone, i created a group called "Standard Users" to which all users were given read rights only across the board which is inherited by new site content. Any site content they needed more permissions to, i set the permissions to not inherit and gave the "Standard User" group the relevant contributor permissions. so in theory you only give contributor access to whatever that group needs.
Left by Carlos on May 19, 2016 5:53 PM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
Hi Carlos, glad it worked out for you!

cheers,
-Thorvald
Left by Thorvald on May 20, 2016 4:27 PM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
I concur with the article and the proposed work-around. As an alternative, you can also consider turning on the content approval option in "Versioning Settings". In that scenario, contributors could make changes, but the changes would need to be approved before they were rolled out.
Left by Matt D on Sep 27, 2016 4:54 PM

# re: Stop contributors from editing pages in SharePoint 2013
Requesting Gravatar...
Thank you for the article. It works fine in "classic view," greying out the menu. But on modern view I can click on the gear icon and display site contents, and from there can delete pages. Libraries are protected. So I guess for now I won't use pages, which is probably OK since I modern web parts don't currently seem to work if they're displayed on a page.
Left by Mike on Nov 02, 2017 7:21 PM

Your comment:
 (will show your gravatar)


Copyright © Thorvald Bøe | Powered by: GeeksWithBlogs.net