ntroduce ViewOwnOrders (bda.plone.orders: View Own Orders) to protect @@myorders and descendant views with a dedicated permission.