Saving an order should not require sql level access privilege

When saving an order, the code in the OrderserviceImpl makes a call to AdministrationService.executeSQL(..), this means the authenticated is required to have the SQL Level Access privilege which is wrong.

The proposed solution is to have a DAO method to be called and get rid of the call to executeSQL