Comment 1 for bug 1095890

There are two options the function user_comments_allowed() needs to check: allowcomments and approvecomments.

if allowcomments of one access right is true, the user can put comments and if approvecomments of one access right is FALSE given the allowcomments is TRUE then the user can publish his/her comment without the approval of the owner.

I think the function user_comments_allowed() is correct as it needs to check though all access rights for both "allowcomment" and "approvecomment" flags