hide comment_forbidden link, update role access #2558