Fixed permission to add and update order, and their tests