When editing a pipeline permissions are checked against root Jenkins instead of the item the pipeline is in. The user may not have configure permissions in Jenkins root but have it in the item and he will not be able to edit the pipeline script.