use correct content from filter array (#2301)
don't email user about comment update when the comment is not viewable by the user (#2301)
use correct methods for determining if the user is allowed to edit / delete comment(s)
to prevent mismatch between UI buttons and permissions check (fixes issue #2350)