I knew it was my screw up.. I didn't use Security Assist behavior on this page for testing purposes.
One more question:
Should I leave OrderUserID as a default value in the variable of the recordset (as it is right now)? Or should I change it back to -1?
As always - thank you so-so much for all your help.