Template admins are not allowed to cancel template import dry-run or workspace build jobs #16254
Description
In #16252 it was discovered that template admins aren't allowed to cancel template dry-run jobs, nor workspace build jobs.
This is due to:
coder/coderd/templateversions.go
Line 677 in 4872d14
And en explanation for it exists here:
coder/coderd/templateversions.go
Lines 464 to 465 in 4872d14
I'm not sure the explanation makes sense, though, at least not for template version dry runs.
We should reconsider the RBAC requirements for cancellation. A template admin may very well need to cancel a workspace build as well.