Ah... I think I see the problem. In your code, you're closing the div before the form select for the secondary target. So, the secondary target is NOT part of the stimulus controller.
You would need an Order model that belongs to the user. Once the order has been placed, you, as an admin, could query all of the orders and their statuses. As a user, they should be able to query just their orders since there is a relationship to the user.