diff --git a/Layout/default/Order/Index.php b/Layout/default/Order/Index.php
index a29b67687..748780916 100644
--- a/Layout/default/Order/Index.php
+++ b/Layout/default/Order/Index.php
@@ -322,7 +322,7 @@
                             <div class="col-md-2">
                               Vorortinstallation:
                               <div class="input-group">
-                                <input type="text" class="form-control datepicker" id="vororttermin-<?=$order->id?>" name="vororttermin" value="<?=date("d.m.Y",$order->install_date)?>" placeholder="--.--.----" />
+                                <input type="text" class="form-control datepicker" id="vororttermin-<?=$order->id?>" name="vororttermin" value="<?=($order->install_date) ? date("d.m.Y",$order->install_date) : ""?>" placeholder="--.--.----" />
                                 <div class="input-group-append">
                                   <button class="btn btn-outline-primary" id="vororttermin-button-<?=$order->id?>" type="button" title="Vororttermin speichern" onclick="saveVororttermin(<?=$order->id?>)"><i class="fas fa-save"></i></button>
                                 </div>
diff --git a/application/Order/OrderController.php b/application/Order/OrderController.php
index de15d9fc4..47f52186f 100644
--- a/application/Order/OrderController.php
+++ b/application/Order/OrderController.php
@@ -652,6 +652,11 @@ class OrderController extends mfBaseController {
   }
   
   protected function saveVorortterminAction() {
+    if(!$this->me->is(["Admin","salespartner"])) {
+      $this->layout()->setFlash("Keine Berechtigung", "error");
+      $this->redirect("Order");
+    }
+    
     $r = $this->request;
     
     $order_id = $r->id;