fix permissions for linking to an order(detail) in search results

plus specs for checking paths displayed in search results
Merge pull request #34 from tablexi/search_permission_70513

fix permissions for linking to an order(detail) in search results