diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissionDefinitionProvider.cs b/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissionDefinitionProvider.cs
index b1aeeee3..9c0cc3ba 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissionDefinitionProvider.cs
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissionDefinitionProvider.cs
@@ -8,7 +8,8 @@ namespace EShopOnAbp.OrderingService.Permissions
     {
         public override void Define(IPermissionDefinitionContext context)
         {
-            var myGroup = context.AddGroup(OrderingServicePermissions.GroupName, L("Permission:OrderingService"));
+            var orderManagmentGroup = context.AddGroup(OrderingServicePermissions.GroupName, L("Permission:OrderingService"));
+            orderManagmentGroup.AddPermission(OrderingServicePermissions.Orders.Default, L("Permission:Orders"));
         }
 
         private static LocalizableString L(string name)
diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissions.cs b/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissions.cs
index 779f1a41..da35c204 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissions.cs
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Application.Contracts/Permissions/OrderingServicePermissions.cs
@@ -2,10 +2,15 @@
 
 namespace EShopOnAbp.OrderingService.Permissions
 {
-    public class OrderingServicePermissions
+    public static class OrderingServicePermissions
     {
         public const string GroupName = "OrderingService";
 
+        public static class Orders
+        {
+            public const string Default = GroupName + ".Orders";
+        }
+
         public static string[] GetAll()
         {
             return ReflectionHelper.GetPublicConstantsRecursively(typeof(OrderingServicePermissions));
diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Application/Orders/OrderAppService.cs b/services/ordering/src/EShopOnAbp.OrderingService.Application/Orders/OrderAppService.cs
index 29bae4f0..0cd8e2e1 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Application/Orders/OrderAppService.cs
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Application/Orders/OrderAppService.cs
@@ -1,5 +1,7 @@
 using EShopOnAbp.OrderingService.Localization;
 using EShopOnAbp.OrderingService.Orders.Specifications;
+using EShopOnAbp.OrderingService.Permissions;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.Extensions.Logging;
 using System;
 using System.Collections.Generic;
@@ -38,6 +40,7 @@ public class OrderAppService : ApplicationService, IOrderAppService
         return CreateOrderDtoMapping(orders);
     }
 
+    [Authorize(OrderingServicePermissions.Orders.Default)]
     public async Task<List<OrderDto>> GetOrdersAsync(GetOrdersInput input)
     {
         ISpecification<Order> specification = SpecificationFactory.Create(input.Filter);
diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/en.json b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/en.json
index 14797854..0bd8ffc3 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/en.json
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/en.json
@@ -1,12 +1,14 @@
 {
   "culture": "en",
   "texts": {
-    "MyAccount":  "My account",
+    "MyAccount": "My account",
     "SamplePageMessage": "A sample page for the OrderingService module",
     "Ordering:00001": "Possible values for Order status: {OrderStatus}",
     "Ordering:00002": "Invalid number of units",
     "Ordering:00003": "Invalid discount",
     "Ordering:00004": "The total of order item is lower than applied discount",
-    "Ordering:01001": "Order with {0} id could not be found!"
+    "Ordering:01001": "Order with {0} id could not be found!",
+    "Permission:Orders": "Orders",
+    "Permission:OrderingService": "Ordering Service"
   }
 }
\ No newline at end of file
diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/tr.json b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/tr.json
index 23ae9a65..11018c22 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/tr.json
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/tr.json
@@ -1,12 +1,14 @@
 {
   "culture": "tr",
   "texts": {
-    "MyAccount":  "Hesabım",
+    "MyAccount": "Hesabım",
     "SamplePageMessage": "OrderingService modulünden örnek bir sayfa",
     "Ordering:00001": "Muhtemel Sipariş durum değerleri: {OrderStatus}",
     "Ordering:00002": "Ürün adedi negatif olamaz",
     "Ordering:00003": "Geçersiz indirim",
     "Ordering:00004": "Ürünlerin toplam bedeli, uygulanan indirimden daha az olamaz",
-    "Ordering:01001": "{0} ID numaralı ürün bulunamadı!"
+    "Ordering:01001": "{0} ID numaralı ürün bulunamadı!",
+    "Permission:Orders": "Siparişler",
+    "Permission:OrderingService": "Sipariş Servisi"
   }
 }
\ No newline at end of file
diff --git a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/zh-Hans.json b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/zh-Hans.json
index bd0af3eb..1ea05073 100644
--- a/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/zh-Hans.json
+++ b/services/ordering/src/EShopOnAbp.OrderingService.Domain.Shared/Localization/OrderingService/zh-Hans.json
@@ -8,6 +8,8 @@
     "Ordering:00002": "无效的单位数量",
     "Ordering:00003": "无效的折扣",
     "Ordering:00004": "订单项的总额低于申请的折扣",
-    "Ordering:01001": "无法找到 id 为 {0} 的订单！"
+    "Ordering:01001": "无法找到 id 为 {0} 的订单！",
+    "Permission:Orders": "命令",
+    "Permission:OrderingService": "订购服务"
   }
 }
\ No newline at end of file