Since group & user permissions are cumulative, this should work. What I would do is test it by enabling RW access for one user in those workspaces and see if they can now add a comment. If so, then it would tell you for certain that it is the group permission that isn't working right, as opposed to some other unusual problem. You could also check the error log to see if anything is being produced (see my sig)