Managers can update order lines
DRY admin_or_manager_required