allow to list SUs only if the company is public or if the company is private only if the user is part of it
allow to list SUs only if the company is public or if the company is private only if the user is part of it

open-company/open-company-storage