[fixes#81218914] forbid viewing private comment of agency/provider/service from un-authorized users