公开组织的资源，非成员不能看到私有资源

app/views/files/_org_subfield_list.html.erb

@@ -1,6 +1,7 @@
 <% delete_allowed = User.current.admin? %>
 
 <% org_subfield_attachments.each do |file| %>
+  <% if file.is_public == 1 or User.current.member_of_org?(file.container.organization) %>
     <div class="resources mt10" id="container_files_<%= file.id %>">
         <div class="homepagePostBrief">
           <div class="homepagePostPortrait">
@@ -65,6 +66,7 @@
         </div>
 
   </div><!---re_con_box end-->
+  <% end %>
 <% end %>
 
 <% if org_subfield_attachments.count == 10 %>