add permissions for creating comments