Feature/book 761

This PR contains the extra permissions for the endpoints of the apps:
bb_orders
bb_donations
payments/orderpayments

These endpoints are specified in the Jira ticket. The PR also contains tests for every view and permission and updates a few factories.
Do you still want these skips?