in DNNPro 7 it appears that anyone with edit content privilages can save an update in the HTMLPro module without clicking the "publish changes" checkbox.  Ignoring that option... when the editor saves the content it's publised directly regardless of workflow rules.

To recreate.

1. Set the site to Content approval workflow
2. create a new user and assign edit privelages for that user on any html content where workflow is in place
3. edit the content, DONT check the publish button or lock content - click Save. 

the expected behavior is for it to go to draft mode, instead it goes direclty to published.  Content reviewers do not get any notification.