There are a list of SharePoint System Pages which inherit view permission by default. If you are going to make a public SharePoint site, you might not want to access these pages by anonymous users or by Form Based Authentication User.
There are may ways to restrict the users access to these pages that I will explain later in a different post.
Below I’m listing down pages that are available in each site under layout mapping.
Site Collection and Site Level Recycle Bin Urls
/_layouts/15/AdminRecycleBin.aspx
/_layouts/15/RecycleBin.aspx
User, User Info, Site Permission related Urls
_layouts/15/permsetup.aspx
This is used to create default groups in SharePoint such as visitors, members and owners.
/_layouts/15/people.aspx?MembershipGroupId=0
All People Url, this can be even used to delete users from the site collection.
User Information Hidden List Urls
/_catalogs/users/detail.aspx
/_catalogs/users/simple.aspx
These lists are actually available from a previous version of SharePoint. These are hidden lists available in the SharePoint containing user information.
/_layouts/15/userdisp.aspx?id={UserID}&Force=True
This is used to view user information in the same page without redirecting to my site.
/_layouts/quiklnch.aspx
This is used to manage quick launch items in SharePoint.
/_layouts/15/AreaNavigationSettings.aspx
This is used to modify navigation setting in the site collection.
Workflow history hidden list
/Lists/Workflow%20History/AllItems.aspx
This is a hidden list for managing and viewing workflow history items.
Site usage page
/_layouts/15/usage.aspx
This is used to view the usage information. But nothing harmful.
Site content and structure pages
/_layouts/15/sitemanager.aspx
This will bring you site management page which is available from SharePoint 2007.
/_layouts/vsubwebs.aspx
List of hierachy pages:
/_layouts/15/settings.aspx
This is the site setting page that contains all administrative links.
/_layouts/15/viewlsts.aspx
This is used to view all site contents. Lists visibility if this page can be hidden using SharePoint designer.
Site and Site Collection feature management links
/_layouts/15/ManageFeatures.aspx
/_layouts/15/ManageFeatures.aspx?Scope=Site
These links are used to activate and deactivate features in site and site collection.
SharePoint Designer Settings
/_layouts/15/SharePointDesignerSettings.aspx
This is used to enable and disable SharePoint designer settings.
Look and Feel Urls
/_layouts/ChangeSiteMasterPage.aspx
This is used to change site collection master pages.
/_Layouts/AreaTemplateSettings.aspx
This is where user can change Page Layouts, Site Templates and other related settings.
/_catalogs/masterpage/Forms/AllItems.aspx
This is the main document library for updating and maintaining related files and master pages.
