When the user has no Update permission, he can still see and change the text fields in the build information page (https://<server>/job/<project>/1/configure). Only the save button is disabled. Having these fields as read-only would be more intuitive.