How to prevent other roles from publishing content

I am new to Drupal. I am working on a website where I have 2 user roles: Site admin and editor.

The site admin has all permissions. I want the editor to only have the permission to edit content but not to publish or edit them. He can view his edited content but cannot publish them.

Different people suggested me different options, like use this module, use that module, but no body is showing me a neat and proper solution.