We are also facing the same.
We have created testRole in Global Roles which have overall READ permission.
We have created testProjectRole in projectRoles which have below permissions.
JOB: BUILD,CANCEL,CREATE,CONFIGURE,READ with pattern "test.*"
1) Initially we did not give JOB create option in GLOBAL roles so testUser not able to see the "NEW ITEM"
2) Later we have given JOB create option in GLOBAL roles so testUser able to see the "NEW ITEM" and he will create the job using the pattern "testDev" successfully.
3) So here is the issue the user can able to create job apart from pattern which is displaying 404 error, but in backend the job is creating when we logged with admin user. So i want the JOB will not create apart from Pattern in project Roles.
Could you please advice on this request.