Following these steps will disable full site publish for all users except admin.
First, switch over to the core database.
Next, open the security editor on the launchpad.
In the Security Editor, choose the Sitecore Client Publishing role.
Deny “Read” on the following items.
Images for reference