Using 1.9.2454, C#.

I have set up roles and users on my site. We have the following roles:
Administrators - can do everything.
Editors - Can add, modify, delete any document type, but not publish.
File Editors - Can add, modify, delete file documents, but not publish.
File Publishers - Can add, modify, delete AND publish file documents.

I have done my best to set up the permissions for this. File Editors and Publishers can only create file documents as expected. The problem is that all roles can publish. This makes workflows pretty useless.

The only place I can find "Publish" permissions is under Content Staging and there I've granted Publish Documents permissions to Administrators and File Publishers only.

Thanks,
Trint