Protected attachments controller

Attachments can only be deleted from the attachment controller by exec and above--TICs will be able to delete attachments for their event from the event edit page, however.