Sounds good.
The Resource Policy wouldn't work in the Context Access ACL entry because it would give the user 'publish' permission but not 'publish_document' permission. The user needs both for protected resources and would only have the first one (that's one reason why the Resource Policy no longer shows up for Context Access ACL entries).
In fact, without 'publish_document' permission, the user can't publish any documents, protected or not.
I think the 'publish' permission is left out of the ContentEditor Policy on the assumption that someone higher up will be reviewing the resources before publishing them.
I'm glad you got it sorted. Thanks for reporting back.
------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone:
http://bobsguides.com/modx.html