The {{ orders }} variable inside liquid now queries for on_behalf_of_user_id and not just created_by. The created_by field is now not matched on if the order contains an on_behalf_of_use_id so even if the user has permission for that order, it will not be contained in {{ orders }} if the order is on behalf of another user.