Try accessing the page with
http://localhost/admin/shop/orderlist/
or
http://localhost/index.php/admin/shop/orderlist/
or http://localhost/index.php/shop/orderlist/
If one of those with admin in it works then it means that you have the url based siteaccess setting on. ie. you would use localhost/user to get user siteaccess and localhost/admin to get admin siteaccess.