How to allow authors to upload photso but NOT post live

Hi, I apparently need a role between contributor and author. I want authors to be able to author their own post, including upload content, but NOT be able to do ANYTHING except save as draft or pending review. How to accomplish this?

Thanks!