By using the cornerstone editor, as long as the user has “Edit Pages” capability in WordPress and “Pages” capability in Cornerstone settings they can always change the page publishing status (eg: change the status of a page from “draft” to “publish”) even if they do not have the “Publish Pages” permission in WordPress. This is a breach of the permission management.
The page I need help with: [log in to see the link]