Another alternative would be restoring the whole system from a backup copy. I'd assume I should be a bigger headache than getting SAP_ALL.
Also, You can try running ujs_activate_content in a different box with ST01 trace turned on. That trace will show you all authorization ujs_activate_content checks.
