Implements authorization for the ability to view and edit orders.