Updates to Order API

1. Ensure API error messages are informative when possible (no such store, invalid order Id, no items on order, order cancelled, order deleted , invalid unit for item, etc...)
2. Make sure all the methods in the API have the correct permission restrictions (any additional security we want to add?)
3. Make sure that user not only has permission to interact with an order, but also is assigned to the selected store (we probably don't check this since our UI does it for us)
4. Ensure that API Calls are created in Katalon to test this

Point to think about, no action required

1. Modify API methods to accept store number instead of entity id
   • Lets keep with using a single API call to get the entity id up front, until such times that CFA ask for something else
2. Make Order API more consistent - (An an example, with counts sometimes we use CountType as an int, sometimes a string, sometimes it's called "StockCountType")
   • This would involve a potential refactor of pages
3. Consider throttling usage so an outside process can't perform an attack through a massive volume of transactions
   • Adding a spike for this, maybe some sort of API gateway?