UPDATE: explicitly provide permissions for comment administration