Correct authorization for order tab