Return permissions for orders within the API results

This allows us to determine what information / buttons to display on the interface for an order