I have created a community where i need to restrict the access for Order object.
I have created permission set and given "Order" object access : read and edit Also, selected permission set in community admin settings.
Still i can perform CRUD operations for order object for community user.
Any suggestions?