Blog Owner/Admin must approve editors/authors posts

Hello! As the title says I want to know if and how to do this: I am an admin for a blog that has a few users posting. How can I make wordpress deny them the right to publish their posts so that it automatically has the pending review status so only I can accept that? It is necessarily that my users have the status of an editor (because below editor they can’t change alignement, add embed code and do a lot of other advanced edits).
I do hope it’s possible and please redirect me to the solution if it’s plugin based or not.
Thank you very much!

And another thing: how can I hide certain posts/pages from being visible by other users (i’m asking about non-published posts, about drafts).
And finally: is there a way to see a log of my users’ activity (what they edit, what the add, what they delete, etc)?
Thanks!