http://drupal.org/project/content_moderation – complex, most sites do not need its advanced permissions, well maintained, does NOT allow handling of not-yet-published content in the same workflow. Even worse, you cannot use Drupal core capabilities to leave unpublished, review, and then publish, because it takes over these settings per content type.
Except where otherwise noted, content on this site is licensed under a Creative Commons Attribution 3.0 Unported License.