diff --git a/BMA.EHR.Command.Service/Controllers/OrderController.cs b/BMA.EHR.Command.Service/Controllers/OrderController.cs
index 841c5e5e..fd2792db 100644
--- a/BMA.EHR.Command.Service/Controllers/OrderController.cs
+++ b/BMA.EHR.Command.Service/Controllers/OrderController.cs
@@ -1281,7 +1281,7 @@ namespace BMA.EHR.Command.Service.Controllers
         {
             try
             {
-                var ync("CREATE", "COMMAND");
+                var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "COMMAND");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -2733,7 +2733,7 @@ namespace BMA.EHR.Command.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "COMMAND";);
+                var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "COMMAND");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -4709,7 +4709,7 @@ namespace BMA.EHR.Command.Service.Controllers
         {
             try
             {
-                var ync("UPDATE", "COMMAND");
+                var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "COMMAND");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -4826,7 +4826,7 @@ namespace BMA.EHR.Command.Service.Controllers
         {
             try
             {
-                var ync("UPDATE", "COMMAND");
+                var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "COMMAND");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {