Add permissions to current order api.
Merge pull request #180 from onepercentclub/current-order-api-permissions

Add permissions to current order api.