Since PostgreSQL 9.2, an unprivileged user can cancel their own queries using pg_cancel_backend(). So I think the original reason behind this complaint is obsolete. I propose to close this bug.