fix permissions bugs on common and variety orders page