Hi Falco,
You're welcome. There's also this issue:
I just reopened it because I think it describes the problem quite well.
Specifically about permissions, there's also this suggestion, which I think is pretty much what you were suggesting as a solution:
https://github.com/IQSS/dataverse-pm/issues/599 is definitely related. Sonia, Ceilyn, and I talked about it a bit today but it needs some more thinking and design. In short, what's happening is that researchers (who don't have permission to publish) are ready for peer review and they click "Submit for Review" which is something different (asking someone to publish your dataset). Like you seem to be suggesting, we should probably allow these researchers to create a Preview URL.
Thanks,
Phil