Do not distinguish between not found and unauthorized access to order.