Liferay Commerce Order Permission Problems

[Jay_Vanpariya1679]

1. Commerce Order successfully created a through the storefront and has View access to it (because of Author Permission), but receives a 403 Forbidden error when attempting to update order information’s of their own order. This happens because Liferay Commerce does not seem to support order-level permissions, meaning there is no way to grant a specific user the ability to act on their own individual order. How can we grant the author/owner permission to update the order info of only their own specific order without over-provisioning access across all orders?

2. The Seller Acceptance Workflow is successfully configured at the channel level, and when an customer places an order it correctly enters a pending approval state. However, the assigned reviewer is unable to view that specific order because Liferay Commerce does not seem to support order-level permissions, leaving no way to grant visibility on a single order instance to a specific reviewer without over-provisioning access across all orders. How can we assign view permission on that specific order to the designated reviewer so the approval workflow can function as intended?

Both problems root down to the same gap: Order-level permissions, so how can we control access on a specific order for a specific user without broadening permissions across all orders?