add the authorization for the operations on comments