Editorial Process

Yes that’s the default behavior. When an “author” writes a post, he cannot publish it, only an “editor” (or higher) can do the publishing action.

As for email notification, there are a couple of plugins for that, here are two :

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)