I have made a group called "content writers" and have granted this to a user. We are concerned that the code he is editing could be altered by accident when using the text/html editor to input new text, but he needs full access to edit as he pleases. How do I go about setting it up so that his edits will never go live without an admin approving before hand?

Is this already set up by default or do i need to activate certain permissions to do so? we're running concrete 5.6(?) i believe