Customer can edit order
Customer can't change orders of others