Hi,

According to http://sdk.episerver.com/library/cms6.1/html/Properties_T_EPiServer_Security_PrincipalInfo.htm HasEditAccess checks for user access to the /edit pages and HasEditorAccess checks for user access to the /editor pages.  Not really sure what the /editor pages are though

Looking at the code in reflector, I see this:

    private static readonly string _editorPath = UriSupport.ResolveUrlFromUIBySettings("Editor/");
    private static readonly string _editPath = UriSupport.ResolveUrlFromUIBySettings("edit/");

    ...

    public static bool HasEditAccess
    {
      get
      {
        return Current.HasPathAccess(EditPath);
      }
    }
    
    public static bool HasEditorAccess
    {
      get
      {
        return Current.HasPathAccess(EditorPath);
      }
    }

_editorPath resolved to "/episerver/CMS/Editor/",
_editPath resolved to "/episerver/CMS/edit/"

It appears that HasEditorAccess is only used within the PropertyXhtmlStringControl for the OnPageEditControls so my guess would be that there are capabilities to give a user only on page edit rights and keep them out of the full editor.