You would need an Order model that belongs to the user. Once the order has been placed, you, as an admin, could query all of the orders and their statuses. As a user, they should be able to query just their orders since there is a relationship to the user.