Restrict changing prices to just those who have authority
Add missing attribute to payment class