Today, I was working on a SharePoint 2016 environment and I noticed that my user with Contribute permissions were able to edit pages. Then when I searched for this issue I found quite a few people with the same issue. As far back as SharePoint 2010. Of course the work around of applying unique permissions to my pages libraries can work, but does that make this okay? I don’t think so.
As shown above the Add and Customize Pages is not ticked for the Contribute permission level. So why can users with this permission level update pages?
Is it because edit items is included in the Contribute permission level too?