Generally when end user submit their application, i will set the permission as Read (application will use for evidence, not allow them to modify after workflow start), but in some case they want to cancel the workflow. I can see the workflow can be cancelled by manually start a workflow from item menu Ability to cancel a workflow , but manually start a workflow need contribute or edit permission? Minimum permissions to publish or start a workflow 

Is it possible to allow end user cancel the workflow but not give them edit permission?