Apologies for the rookie question (is it me or is there no search functionality in these forums?)
I cannot find the right combination of settings in Roles to create a role that can edit pages in draft but NOT publish them. you can check 'view any page' or 'edit any page' but I can't see 'publish any page' for instance.
Also I would like to know how changes in drafts can be alerted so that those with permission to publish can check them and push them live.
I'm sure this must be simple but the answers evade me... Can anyone help?

The advancedworkflow module provides this capability, by restricting the 'canPublish' permission and requiring review before publish. The default behaviour without any additional modules is that anyone who can edit a page can publish that page.