Small api logic changes, small order changes

order/views.py

@@ -1,15 +1,12 @@
 from django.http import HttpResponseRedirect
 from django.shortcuts import render
 from .forms import *
+from django.contrib.auth.decorators import login_required
 
 
 def orders_list(request):
     if request.user.is_authenticated:
-        if request.user.is_staff:
-            orders = Order.objects.filter()
-        else:
-            orders = Order.objects.filter(published=True, moderated=True)
-        orders.order_by('create_time')
+        orders = Order.get_all_for_user(request.user)
         return render(request, 'orders/orders-list.html', {'orders': orders[:50]})
     else:
         return HttpResponseRedirect('/accounts/register')
@@ -36,3 +33,10 @@ def order_create(request):
             form = UnregisteredUserOrderCreationForm()
     print(form.visible_fields)
     return render(request, 'orders/order-create.html', {'form': form})
+
+
+@login_required
+def order_view(request, order_id):
+    order = Order.get_all_for_user(request.user)
+    order = order.select_related('address_city').get(id=order_id)
+    return render(request, 'orders/order-view.html', {"order": order})