Orders#index Fix permission bug
More centralization authorization