I'm try set settings for 'project-based security' for disable 'grants the ability to cancel a build'.
I performed initial steps in Configure Global Security page. I added 2 users, first - zzz with all grants and second - xxx with Job 'read' and 'build' grant.
When i build Job as 'xxx', i can cancel a build.