Answer
Access to the supersede action is controlled through the purchasing projection's action grants like any other action — restrict it there for specific roles, or hide the button entirely through page configuration if nobody should see it as an option at all.