Reading these in the permissions page, it looks like they follow the same pattern as for nodes -- that is, one is a more powerful superset of the other. So if I have 'cancel signups', then 'cancel own signups' is moot.

However, only 'cancel own signups' is checked in signup_edit_form().