Add permission check for order history details