Approving posts and restricting user capabilities

Hi,

Is there any solution (I’d assume a plugin but not necessarily) to achieve the following:

1. Restrict a particular user’s capability to only one post type(s) (custom post type) so they can create/delete/edit posts of one type only (the rest read only)

2. Before a post/page/custom post is published it needs approval of one of the admins.

Is it possible?