Strange as it checks permission before to select issues to select comments.
PHP Code:
while ($issueresult = vB::$db->fetch_array($issueids))
{
$issueid = verify_issue($issueresult['issueid'], true, array('avatar', 'vote', 'milestone'));
$issueperms = fetch_project_permissions(vB::$vbulletin->userinfo, $project['projectid'], $issueid['issuetypeid']);
I will review it when I could have some time.