Merge remote-tracking branch 'origin/dev_aliyun' into dev_aliyun

app/views/task_banks/show.json.jbuilder

@@ -1,5 +1,6 @@
 json.(@bank, :id, :name, :description, :task_type, :is_public)
 # 附件
+json.authorize @bank.user_id == current_user.id || current_user.admin?
 json.attachments @bank_attachments do |attachment|
   json.partial! "attachments/attachment_simple", locals: {attachment: attachment}
 end