CREATE POLICY "Anyone can upload violation response photos"
ON storage.objects FOR INSERT
WITH CHECK (bucket_id = 'violation-photos' AND (storage.foldername(name))[1] = 'responses');