Hello,
When logged as user, i can see that the user can access to the Website Functions, “Create Website, List Websites, Modify Website, Delete Website” i think that the user should not have access to this options because actually 1 website = 1 account isnt it? Users cant see packages or select owners so users should not have access to this feature, they should unable to delete or modify they own website so this access should be disabled for users.