We are currently running 3.3.7 and I have a quesiton about refund payments. One of our employees (I can't tell who) has managed to refund money back to credit cards without authorization. Only our billing department can manually run cards. Automated tasks runs all other CC transactions. Here are the relevant settings in "billing": Bill negative balances = no Amount for billing must be greater than $4.99 The username who ran each of the refunds was our automated tasks user (one of our employees edited an auto-created invoice to have a negative amount too and I've stopped that). I can easily stop the editing of invoices, but the payment refund seems to be intentional and untrackable. I think they checked the "bill now" box and it ran the credit card for a negative balance for some reason. I had thought the settings for rejecting less than 4.99 and no negative balances would stop this. How do I stop this without removing the ability to check the bill now box? Thank you.