I want a user group to only be able to access our published front-end site. How can I prevent these users from accessing System pages?

For example, I don't want them to be able to access /_layouts/15/viewlsts.aspx

  • How about allowing inplview.aspx which is a rest call to sharepoint lists. We have some custom js code on publishing pages to display lists on a page. But we still want to deny system pages for forms based users who are read only. – rkim Jun 20 '17 at 12:59

If you create a custom permission level based on Read, but deselect View Application Pages, that should prevent them from getting to those pages. Then apply this permission level to any desired group(s).

| improve this answer | |
  • Is this done from central admin? – matt Jan 9 '15 at 21:17
  • It could be done in central admin and applied to a web application f necessary, in this situation I think doing it at a site collection level would be fine. – Eric Alexander Jan 9 '15 at 23:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.