remove staff_only fields from Listing, fix permissions on a comment visibility method