The key here is the enterprise_relationship. This is required for the supplier to have permission to see the orders. Curiously, the unit test still passes. All will be revealed in the next commit..