Recently, while working on an EPiServer CMS5 R2 website build I was required to lock down the editors rights. The project required users to only be able to edit and publish pages, not create or delete them.
Controlling an editors rights within Edit Mode, the full screen, Windows explorer like console, is not an issue. All you need to do is modify their access rights and remove Create and Delete permission from the Root folder down.
Unfortunately, the Direct On Page Editing, or DOPE, accessed on page from the right click context menu, does not seam to take any notice of this.
The standard EPiServer on page edit menu.
More...