Editorial Process

Yes that’s the default behavior. When an “author” writes a post, he cannot publish it, only an “editor” (or higher) can do the publishing action.

As for email notification, there are a couple of plugins for that, here are two :