We are trying to update a role to remove create and change access to certain order type X. It works okay. The user has a display role which allows to display all Order types. So, the role that has been updated when combined with the display role, the user is able to create and change the restricted Order types as well.
Did anyone face a similar issue?
Appreciate your inputs.