This is a follow-up to #6 by pgrayove-mcpl, where the content gets published when saved in Draft state. That issue also included some errors, which I think were unrelated to this issue (and have been resolved there).
I've set a content type save in Draft mode, then set permissions for a test user to not be able to moderate content from draft > needs review, needs review > draft, or needs review > published. When the test user edited content, the content showed that it was in draft, but the draft version was published anyway.
From @laryn
've played around with this a bit and haven't replicated the notices you found, but I was expecting the non-admin editor's changes to be saved as an unpublished draft rather than changing the live content. I need to get a better handle on what this module is trying to do and see if I'm understanding or not.
From @stpaultim
I think I'm getting the same results that @laryn is.
- I configured posts to enable "moderation" of revisions.
- I left the default status options as they are.
- I create a post, save and publish it.
- I then click new draft and make a change to the document.
- I leave the "moderation state" as draft and save
- My changes are published. This does not seem right.
NOTE: I have not done anything with permissions.

This is a follow-up to #6 by pgrayove-mcpl, where the content gets published when saved in Draft state. That issue also included some errors, which I think were unrelated to this issue (and have been resolved there).
From @laryn
From @stpaultim
NOTE: I have not done anything with permissions.