With this change, user subscriptions created in Virtual Terminal will now appear in the list under the order user/customer and not under the agent user's subscription_ids. This is a follow up for API: Changes to Guest Virtual Terminal Orders which addressed customer attribution on the payment side and changed how guest Virtual Teriminal orders are handled.

This release also contains security improvements when dealing with "owned" roles and permission sets. API consumers with "owned" permission can now query orders with their on_behalf_of_user_id and can no longer query orders they created but have an on_behalf_of_user_id that does not match their user ID.