I believe the attached patch fixes this issue. Users without the "access comments" permission should be directed to drupal's access denied page rather than having this module serve up comments they should not be able to see.

The menu items will also not be present if the viewing user does not have the "access comments" permission.

This patch is very small and works fine as near as I can tell.

CommentFileSizeAuthor
comments_page.module.patch1.47 KBKimbecca