fix: Unauthorized user may access comment of confidential issue