Fix authorization for purchase and order show actions