create comment access policy