we should restrain user on event request_refund [Fix #55761500]