How to make authors’ posts subject to editor approval

Hello,
I am looking for an easy way to change a blog’s roles so that authors can create posts and upload files, but an editor/administrator has to approve them before they are published. Making the authors mere contributors isn’t enough, as those are not allowed to upload files which is too restrictive for the purpose at hand.
I looked through the Codex documentation and came a cross an expansive explanation of WordPress’s roles and a list of plugins, which however on closer look seemed to be quite outdated.
Could anybody point me towards a tweak / plugin / setting to achieve this? Any input is much appreciated.
Thanks in advance,
Pekka

I use WP 2.7 by the way.