今天接到一个任务，不知道是需求者要求太怪，还是咋的。找了半天的解决方案都没有找到。

任务如下

Prevent Full Control access for Site Owners
Overview
Prevent users with ‘Site Owner’ privilege (or lower) from granting themselves the ‘Full Control’ permission.
Details
Modify the Microsoft application pages that manage the permissions for SharePoint security.  Each of the pages should determine if the user has IsAdmin privilege
•    EditRole.aspx –
•    Editprms.aspx -
•    EditGroup.aspx –
Note: There may be other pages that I am not aware of at this point.

最先看到这task的时候，首先想到是通过HttpHandler去做。不知道是否可行。

有高手指点下，指点下思路也行