CMS permissions and sections
 

I have set a user group to have 'can read' and 'create content' permissions to a section.
They do not have 'can publish' permission.

Nonetheless, when a user in this user group creates a new article, the publish radio button is displayed, and if they click 'yes', everyone can see the article.

How do I set it up so they can create but not publish?

Thanks