update code

app/Http/Requests/Attachment/DestroyRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests\Attachment;
+
+use Illuminate\Foundation\Http\FormRequest;
+use App\Entities\Attachment;
+
+class DestroyRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return Attachment::find($this->attachment)->document->creator_id == $this->user()->id;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array
+     */
+    public function rules()
+    {
+        return [
+            //
+        ];
+    }
+}