invoiceninja/app/Http/Requests/CreateDocumentRequest.php

<?php

namespace App\Http\Requests;

use App\Models\Expense;
use App\Models\Invoice;

class CreateDocumentRequest extends DocumentRequest
{
    protected $autoload = [
        ENTITY_INVOICE,
        ENTITY_EXPENSE,
        ENTITY_TICKET,
    ];

    /**
     * Determine if the user is authorized to make this request.
     *
     * @return bool
     */
    public function authorize()
    {
        if(session('contact_key'))
            return true;

        if (! $this->user()->hasFeature(FEATURE_DOCUMENTS))
            return false;

        
        if ($this->invoice && $this->user()->cannot('edit', $this->invoice))
            return false;


        if ($this->expense && $this->user()->cannot('edit', $this->expense))
            return false;


        if($this->ticket && $this->user()->cannot('edit', $this->ticket))
            return false;


        return true;
        //return $this->user()->can('create');
    }

    /**
     * Get the validation rules that apply to the request.
     *
     * @return array
     */
    public function rules()
    {
        return [
            //'file' => 'mimes:jpg'
        ];
    }
}