Added canEdit() and added to permissions array (EDIT_ORDER).

By default canView() was only accepting ADMIN, I changed this to VIEW_ORDER.

Also added CanEdit() and new permission EDIT_ORDER.