The web developer should not be able to disable pasting. Just like they should not be able to disable autofill, and other features that the user wants and has enabled.

So many things web sites do that are counter to the user's expectation, where I think to myself: Why even have that lever?