Within our SharePoint 2013 farm, we have a number of users who are ADMIN – and others who are simply FULL CONTROL.
We’re finding that we get an error when these ‘FULL CONTROL’ users activate the SharePoint Publishing feature.
Sorry, you don’t have access to this page
When looking with LOGS, there are some error messages related :
System.Runtime.InteropServices.COMException: <nativehr>0x81070211</nativehr><nativestack></nativestack>Cannot open file “_catalogs/masterpage/__DeviceChannelMappings.aspx“
SPRequest.GetMetadataForUrl: UserPrincipalName=i:0).w|s-1-5-21-1159821373-1672690008-2013803672-278888, AppPrincipalName= ,bstrUrl=/DeviceChannels
System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
ISSUE –> Device Channels
It would appear that these FULL CONTROL users do not have access to the library at the root site, that controls ‘DeviceChannels’.
Even if these aren’t being used within your farm, it’s part of the provisioning code for the Publishing feature. If that errors, then it all causes the ‘access denied’.
When doing ‘check permissions’ within the library, it shows as this :
Within the library, choose to “GRANT PERMISSIONS” to the specific user – or group. For some reason, this library has ‘unique permissions’ – it could be a consideration to “re-inherit” permissions.
Or – grant read-only permissions to EVERYONE.
After you’ve done this, you will find that the “FULL CONTROL” users can now activate the PUBLISHING feature.