[ADD] blog.tag access rights so public user can read blog