public ActionResult Confirm(int id) { var order = orderRepository.GetById(id); userService.CurrentUser.EnsureCanView(order); return View(ShopView.Data.WithOrder(order)); }