public ActionResult Details(int id = 0)
        {
            Order order = db.Orders.Find(id);
                        
            if (order == null)
            {
                return HttpNotFound();
            }
            return View(order);
}

 public ActionResult Details(int id = 0)
        {
            var userid = (Guid)Membership.GetUser().ProviderUserKey;
            var orders = db.Orders.Include(p => p.Customer)
                               .Where(p => (p.Id == id) & (p.UserId == userid));
            Order order = orders.First();

            if (order == null)
            {
                return HttpNotFound();
            }
            return View(order);
        }
}