attachments, issue #24
editing comment restrictions requires at least commenting permission