Workflow Application - prevent Publishers from editing before publishing a document

Hi,

I’ve set up the workflow application.

Now we have the requirement that a publisher is not allowed to edit a page in the step before publishing.
Refusing the page and then start the workflow all over for soing a change is okay. But it should not be possible to change a moderated document again before publishing.

I’ve tried setting Publisher user groups rigths to deny edit rights in generel or on Page/Subpage level where the drafts are placed. But it seems the rights für the page to be published are set directly on page level when a moderator approved the page.

Have I missed a configuration option?

Is this a new feature?

Regards,
Joachim