thanks for reporting, we have already fixed the issue in [minor] set apply_for_all_roles to 1 in update user permissions patch by mbauskar · Pull Request #3809 · frappe/frappe · GitHub.
Although you will need to manually reset the permission for the Sales Order doctype