If you can edit comments on the post, 'Slow down Cowboy' shouldn't kick in

[nacin]

Currently it's for administrators only. That doesn't make much sense for those who can already moderate comments.

[nacin]

Also, we should only do an IP check if the user isn't logged in. When they are, we should do a user_id check instead. This is important for shared IPs, particularly conferences where a swarm may occur.

[garyc40]

check moderate_comments cap

[garyc40]

check is_user_logged_in() as well

[chriscct7]

Marking for dev review

[wonderboymusic]

In 34522:

Comments: in check_comment_flood_db(), don't throttle moderators. If the commenter is logged in, check against their user_id instead of comment_author_IP.

Throwback: "If you can edit comments on the post, 'Slow down Cowboy' shouldn't kick in."

Props garyc40, wonderboymusic.
Fixes #16219.