fix in security for order view