Unfortunately Microsoft somehow forgot to take off the “View All Site Content” button in the Site Actions menu on SharePoint 2010 for all users. Even visitors can look behind the curtain and find all the lists and libraries. Many times you don’t want everybody to be able to find out whats all behind your SharePoint site.
Fortunatley Microsoft at least provided us with a solution to implement in the MasterPage. In SharePoint 2010 the v4.master !!
<Sharepoint:SPSecurityTrimmedControl runat="server" PermissionsString="ManageWeb"> <SharePoint:SiteActions runat="server" accesskey="<%$Resources:wss,tb_SiteActions_AK%>" ="SiteActionsMenuMain" PrefixHtml=""SuffixHtml=""MenuNotVisibleHtml="&nbsp;"> ...... All the data..... </SharePoint:SiteActions> </Sharepoint:SPSecurityTrimmedControl> </span>
Simply find “SiteActionsMenuMain” in the Masterpage and add “Sharepoint:SPSecurityTrimmedControl runat=”server” PermissionsString=”ManageWeb”” before the tag line.
Then find the end tag “/SharePoint:SiteActions” and add “/Sharepoint:SPSecurityTrimmedControl” below.
The PermissionsString=”ManageWeb” allows only Site Collection Admins and Site Owners to see the Site Actions menu. There are many other permission possiblities. By the way, you can quickly see if it was applied correctly: The Site Actions Menu button turns blue.