users can no longer order products beyond their permissions from search page