  putComment(comment, isMarkdown, commentId, author) {
    const { pageId, revisionId } = this.getPageContainer().state;

    return this.appContainer.apiPost('/comments.update', {
      commentForm: {
        comment,
        page_id: pageId,
        revision_id: revisionId,
        is_markdown: isMarkdown,
        comment_id: commentId,
        author,
      },
    })
      .then((res) => {
        if (res.ok) {
          return this.retrieveComments();
        }
      });
  }
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.