Finpay

Description
Normal merchant users cannot issue a refund and require the intervention of a supervisor user to
enter their password in order to get a refund issued to the customer. The implementation of this
feature was done incorrectly allowing a normal merchant user to issue a refund without supervisor
intervention