PolicyAdvisoryGroup attachments are always visible

Since there's no publishing flow for Policy Groups and children, we
don't need to do proper permission-based visibility checking for them.

Side note: the controller is nasty and we should perhaps consider
refactoring it to make visiblity calculation easier/inherited for future
attachment types.