comments system final
acl with assertion for comments owner