fixes missing check if user is allowed to create a comment