fix permissions on proposal comments