need role capability code for EDIT but not PUBLISH

I am familiar with the various role capabilities and can manipulate them for each role at will. However I do not see a capability or combination of capabilities that has this effect:

Role can EDIT pages, but not PUBLISH those edits.

I want edited content to be submitted for review to a higher role that would approve and publish. The edit/push-the-edit functionality seems to be wrapped up in one.

Any ideas about how to achieve this functionality? If you know for a FACT that there is plugin that achieves this in particular, let me know (I haven’t seen one). Otherwise I am looking for some code ideas.

Something like update_posts as a capability, that when disabled would offer the Submit for Review button. As I write this, I start to see the complexity… I guess the edited version would appear in the text editor (and could be previewed). If the higher admin did not approve, I guess they would use Revisions to roll back in the text editor…?

What do you think? Can it be done?