The service role app_service works only with orders and line items: it needs to read, add, and modify rows in orders and order_items. Deletion and access to other tables are not needed. Configure exactly that access.