I can try to get you some idea... You could create some system plugin that will be loaded after
the System - JComments plugin. In your plugin you could get JComments ACL object:
$jcommentsACL =& JCommentsFactory::getACL();
and set your own values to canEdit, canDelete and other fields for certain user... As well this object use singleton pattern it would be same for all JComments's calls...