Tricky little bug. Allowed somebody to bypass comment permissions. Hopefully the fix will have no undesired side effects.
Merge https://github.com/friendica/red into zpull