restrict order index to correct user