According to kohsuke there's an implicit relationship between the Job/Build permission and Job/Cancel in the source code, but it turns out the hover-help-text doesn't explain this to the end user.