A user can no longer view an order that he does not own