At present only an admin user can cancel an order.
There should be a user permissions option to allow non admin users to be able to cancel orders.
