Fixing permissions for canView and canCreate on Discount and OrderCoupon

If you have access to the "Discounts" CMS section, you can perform all
CRUD actions against Discount and OrderCoupon records.