rename shop_uid to vendor_uid
better naming
refactoring: get_allowed_orders doesnt take context anymore, plone.api import without ploneapi alias