Bug 23442: Add refund permission