Decouples group content visibility from membership policy

rebased #528 and updated based on discussion for that ticket

Don't merge yet - need to figure out why unit tests are not passing.