? order_perms.patch
Index: uc_order/uc_order.module
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/ubercart/uc_order/uc_order.module,v
retrieving revision 1.12.2.36
diff -u -p -r1.12.2.36 uc_order.module
--- uc_order/uc_order.module    18 Nov 2009 22:24:02 -0000      1.12.2.36
+++ uc_order/uc_order.module    8 Jan 2010 02:23:16 -0000
@@ -459,7 +459,7 @@ function uc_order_token_list($type = 'al
  * Implementation of hook_perm().
  */
 function uc_order_perm() {
-  return array('view own orders', 'view all orders', 'create orders', 'edit orders', 'delete orders', 'unconditionally delete orders', 'administer order workflow');
+  return array('view own orders', 'view all orders', 'create orders', 'edit orders', 'delete orders', 'unconditionally delete orders', 'administer order workflow', 'update order status', 'send email on order update', 'add order admin comment');
 }

 /**
Index: uc_order/uc_order.order_pane.inc
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/ubercart/uc_order/Attic/uc_order.order_pane.inc,v
retrieving revision 1.1.2.20
diff -u -p -r1.1.2.20 uc_order.order_pane.inc
--- uc_order/uc_order.order_pane.inc    5 Nov 2009 15:21:54 -0000       1.1.2.20
+++ uc_order/uc_order.order_pane.inc    8 Jan 2010 02:23:16 -0000
@@ -611,10 +611,12 @@ function uc_order_view_update_form($form
     '#title' => t('Add an admin comment'),
     '#collapsible' => TRUE,
     '#collapsed' => TRUE,
+    '#access' => user_access('add order admin comment'),
   );
   $form['admin_comment_field']['admin_comment'] = array(
     '#type' => 'textarea',
     '#description' => t('Admin comments are only seen by store administrators.'),
+    '#access' => user_access('add order admin comment'),
   );

   $form['current_status'] = array(
@@ -645,12 +647,14 @@ function uc_order_view_update_form($form
     '#options' => $options,
     '#attributes' => array('style' => 'display: inline;'),
     '#weight' => -10,
+    '#access' => user_access('update order status'),
   );

   $form['controls']['notify'] = array(
     '#type' => 'checkbox',
     '#title' => t('Send e-mail notification on update.'),
     '#weight' => 0,
+    '#access' => user_access('send email on order update'),
   );

   $form['controls']['submit'] = array(