Issue #2977052 by john.lee: Give authenticated users the "view own commerce_order" permission by default