comment authorization