Restrict the orders view to user in session.