Only use OrdersController for read-only access to current user's frozen orders