[api] added CommentsController#permission_check! to blacklist