Orders API.
Close order, admin has vendor permissions.
WIP, product api.