CREATE POLICY "Board members can view their association violations"
ON public.violations
FOR SELECT
TO authenticated
USING (
  association_id IN (
    SELECT bm.association_id
    FROM public.board_members bm
    WHERE bm.user_id = auth.uid()
  )
);