fix bug orderDisplayAction

Controller/OrderController.php

@@ -52,22 +52,23 @@ public function displayOrderAction(
         OrderUser $shippingUser = null
     )
     {
+
         if (
             ! $this->get('security.context')->isGranted('ROLE_SHOP_USER')
         ) {
             return new Response('The user should be authenticated on this page');
         }
 
+        $em = $this->getDoctrine()->getManager();
+        $order = $em->getRepository("KitpagesShopBundle:Order")->find($orderId);
+
         if (
             ($order->getUsername() != null) &&
             ($order->getUsername() != $this->get('security.context')->getToken()->getUsername())
         ) {
             return new Response('You are not allowed to see this order');
         }
 
-        $em = $this->getDoctrine()->getManager();
-        $order = $em->getRepository("KitpagesShopBundle:Order")->find($orderId);
-
         // modify ready_to_pay or created orders (and not payed or canceled orders)
         if (
             ($order->getState() == OrderHistory::STATE_READY_TO_PAY) ||