To read all comments (by any user) linked to a specific feature the accessing user must have Read (0) permission on that feature.

To create a comment for a feature the creating user must have Comment (2) permission on that feature. Comments can be created regardless of the approval status of a feature.

A user can delete all comments on a feature if he has Manage (7) permission on that feature.