Implemented permission checking on orders.views add and orders.views
edit, interpolated some user information into templates