FIX enable non admin users to view/modify orders