#sysSecurityApp .ofa-head{display:flex;align-items:center;justify-content:space-between;gap:14px;flex-wrap:wrap}#sysSecurityApp .ofa-head h2{margin:0;font-size:21px}#sysSecurityApp .ofa-head p{margin:6px 0;color:var(--sysdash-muted-strong)}#sysSecurityApp .ofa-scope,#sysSecurityApp .ofa-badge{padding:5px 9px;border:1px solid var(--sysdash-line);background:var(--sysdash-surface-2);font-size:12px}#sysSecurityApp .ofa-notice{padding:12px;margin:14px 0;border-left:3px solid var(--sysdash-accent);background:var(--sysdash-accent-soft)}#sysSecurityApp .ofa-selectors{display:grid;grid-template-columns:repeat(auto-fit,minmax(210px,1fr));gap:14px;margin:14px 0}#sysSecurityApp .ofa-selectors label{display:flex;flex-direction:column;gap:7px;font-weight:600}#sysSecurityApp [data-one-form-access] input[type=search],#sysSecurityApp [data-one-form-access] select{width:100%;padding:8px;border:1px solid var(--sysdash-line-strong);background:var(--sysdash-surface);color:var(--sysdash-text);min-height:36px;border-radius:3px;font:inherit}#sysSecurityApp [data-one-form-access] input[type=checkbox]{accent-color:var(--sysdash-accent);width:17px;height:17px;vertical-align:middle;margin-right:6px}#sysSecurityApp [data-one-form-access] button{padding:7px 12px;min-height:34px;background:var(--sysdash-surface);color:var(--sysdash-text);border:1px solid var(--sysdash-line-strong);border-radius:3px;cursor:pointer;font:inherit}#sysSecurityApp [data-one-form-access] button:disabled{opacity:.5;cursor:default}#sysSecurityApp [data-one-form-access] .ofa-primary,#sysSecurityApp .ofa-tabs .is-active{background:var(--sysdash-accent);color:#fff;border-color:var(--sysdash-accent)}#sysSecurityApp .ofa-tabs{display:flex;gap:7px;flex-wrap:wrap;margin:18px 0 12px}#sysSecurityApp .ofa-body{border:1px solid var(--sysdash-line);padding:16px;background:var(--sysdash-surface)}#sysSecurityApp .ofa-body h3{font-size:15px;margin:0 0 10px}#sysSecurityApp .ofa-rights{display:grid;grid-template-columns:repeat(auto-fit,minmax(130px,1fr));gap:10px;margin:14px 0}#sysSecurityApp .ofa-rights label{padding:12px;border:1px solid var(--sysdash-line);background:var(--sysdash-surface-2)}#sysSecurityApp .ofa-state,#sysSecurityApp .ofa-footer{display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap;margin-top:14px}#sysSecurityApp .ofa-badge.is-on{color:var(--sysdash-accent-2);border-color:var(--sysdash-accent-2)}#sysSecurityApp .ofa-help{color:var(--sysdash-muted-strong);font-size:12px;margin:8px 0}#sysSecurityApp .ofa-table{overflow:auto}#sysSecurityApp .ofa-table table{width:100%;border-collapse:collapse}#sysSecurityApp .ofa-table td,#sysSecurityApp .ofa-table th{padding:10px;border-bottom:1px solid var(--sysdash-line);text-align:left}#sysSecurityApp .ofa-table th{background:var(--sysdash-surface-2);font-size:12px}#sysSecurityApp .ofa-empty{padding:30px;text-align:center;color:var(--sysdash-muted-strong)}#sysSecurityApp .ofa-error{padding:12px;border-left:3px solid var(--sysdash-danger);background:var(--sysdash-danger-soft)}
.ofa-directory-actions{display:flex;flex-wrap:wrap;gap:8px;align-items:center;padding:12px 0}.ofa-advanced{border:1px solid var(--sysdash-line);margin-top:16px;padding:14px;background:var(--sysdash-surface)}.ofa-advanced>summary{font-weight:600;color:var(--sysdash-accent);cursor:pointer}.ofa-advanced .ofa-access-guide{display:none}.ofa-advanced .ofa-head{display:none}
/* Keep everyday security tasks separate from advanced maintenance. */
body #sysSecurityApp .sys-security-guide{padding:10px 14px;color:var(--sysdash-muted-strong);border-left:3px solid var(--sysdash-accent);background:var(--sysdash-surface-2);line-height:1.8;margin-bottom:14px}body #sysSecurityApp .sys-security-advanced{border-bottom:1px solid var(--sysdash-line);margin-bottom:10px}body #sysSecurityApp .ofa-table select{min-width:180px}
body #sysSecurityApp .sysdash-commandbar{align-items:flex-start;flex-wrap:wrap}body #sysSecurityApp .sysdash-actions{flex-wrap:wrap}body #sysSecurityApp .sysdash-segment{flex-wrap:wrap;gap:5px;border:0;box-shadow:none}body #sysSecurityApp .sysdash-segment button{border:1px solid var(--sysdash-line);border-radius:3px;min-height:36px}body #sysSecurityApp .sys-security-advanced{padding:8px 0}body #sysSecurityApp .sys-security-advanced summary{cursor:pointer;color:var(--sysdash-muted-strong)}body #sysSecurityApp .sys-security-advanced .sysdash-segment{margin-top:8px}

#sysSecurityApp .ofa-access-guide{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;margin:16px 0;padding:16px;border:1px solid var(--sysdash-line-strong);border-left:3px solid var(--sysdash-accent);background:var(--sysdash-surface-2)}#sysSecurityApp .ofa-access-guide>div{flex:1 1 300px}#sysSecurityApp .ofa-access-guide p{margin:6px 0 0;line-height:1.6;color:var(--sysdash-muted-strong)}#sysSecurityApp .ofa-access-guide button{display:inline-flex;align-items:center;gap:8px;font-weight:600}#sysSecurityApp .ofa-footer{padding:14px;border:1px solid var(--sysdash-line);background:var(--sysdash-surface-2)}#sysSecurityApp .ofa-footer-actions{display:flex;gap:8px;flex-wrap:wrap}#sysSecurityApp [data-one-form-access] button:focus-visible{outline:2px solid var(--sysdash-accent);outline-offset:2px}#sysSecurityApp [data-one-form-access] button:not(:disabled):hover{filter:brightness(.94)}@media(max-width:600px){#sysSecurityApp .ofa-access-guide button,#sysSecurityApp .ofa-footer-actions,#sysSecurityApp .ofa-footer-actions button{width:100%}#sysSecurityApp .ofa-access-guide button{justify-content:center}}
.ofa-advanced label:has([data-ofa-role]){display:none}
.ofa-detail-screen[hidden],[data-access-directory][hidden]{display:none!important}
.ofa-detail-heading{display:flex;align-items:center;gap:16px;flex-wrap:wrap;border-bottom:1px solid var(--sysdash-line);padding-bottom:14px;margin-bottom:14px}.ofa-detail-heading>div{flex:1;min-width:180px}.ofa-detail-heading h2{margin:0;font-size:20px}.ofa-detail-heading p{margin:4px 0;color:var(--sysdash-muted-strong)}
.ofa-detail-screen [data-access-preparation]>.ofa-selectors,.ofa-detail-screen .ofa-state,.ofa-detail-screen .ofa-state+.ofa-help{display:none!important}
.ofa-detail-screen{margin-top:0;border-top:3px solid var(--sysdash-accent);scroll-margin-top:100px}
#sysSecurityApp .ofa-detail-screen .ofa-head,#sysSecurityApp .ofa-detail-screen .ofa-access-guide{display:none}
#sysSecurityApp .ofa-table{color:var(--sysdash-text)}
.ofa-group-row td{background:var(--sysdash-surface-2);border-left:3px solid var(--sysdash-accent)}.ofa-group-row strong{margin-right:16px}.ofa-group-row button{font-size:12px}.ofa-row-sections{white-space:nowrap}.ofa-row-sections button+button{margin-left:6px}.ofa-advanced[open]{border-top:3px solid var(--sysdash-accent);scroll-margin-top:90px}
/* Guided form access: progressive controls using the shared dashboard palette. */
#sysSecurityApp .ofa-guided{padding:16px;background:var(--sysdash-surface);border:1px solid var(--sysdash-line);font-size:13px}
#sysSecurityApp .ofa-guided [hidden]{display:none!important}
#sysSecurityApp .ofa-guided .ofa-head{padding-bottom:14px;border-bottom:1px solid var(--sysdash-line)}
#sysSecurityApp .ofa-guided .ofa-selectors{padding:16px;background:var(--sysdash-surface-2);border:1px solid var(--sysdash-line);border-left:3px solid var(--sysdash-accent);align-items:end}
#sysSecurityApp .ofa-guided .ofa-selectors label{font-size:14px;gap:10px}
#sysSecurityApp .ofa-step-heading{display:flex;align-items:center;gap:12px;margin:22px 0 12px}
#sysSecurityApp .ofa-step-number{display:grid;place-items:center;width:32px;height:32px;flex-shrink:0;background:var(--sysdash-accent);color:white;border-radius:50%;font-weight:600}
#sysSecurityApp .ofa-step-heading h3{margin:0;font-size:16px}
#sysSecurityApp .ofa-step-heading p{margin:5px 0;color:var(--sysdash-muted-strong);line-height:1.5}
#sysSecurityApp .ofa-step-heading .ofa-advanced-toggle{margin-left:auto;font-size:12px}
#sysSecurityApp .ofa-start{padding:48px 16px;text-align:center;background:var(--sysdash-surface-2);border:1px dashed var(--sysdash-line-strong)}
#sysSecurityApp .ofa-start i{color:var(--sysdash-accent);font-size:30px}
#sysSecurityApp .ofa-start h3{font-size:18px;margin:16px 0 8px}
#sysSecurityApp .ofa-start p{line-height:1.7;color:var(--sysdash-muted-strong)}
#sysSecurityApp .ofa-bulk{margin:12px 0;border:1px solid var(--sysdash-line);padding:10px 12px;background:var(--sysdash-surface-2)}
#sysSecurityApp .ofa-bulk summary{cursor:pointer;color:var(--sysdash-accent);font-weight:600}
#sysSecurityApp .ofa-guided:not(.ofa-show-advanced) .ofa-row-sections,#sysSecurityApp .ofa-guided:not(.ofa-show-advanced) thead th:last-child{display:none}
#sysSecurityApp .ofa-guided:not(:has(.ofa-bulk[open])) tbody tr:not(.ofa-group-row)>td:first-child,#sysSecurityApp .ofa-guided:not(:has(.ofa-bulk[open])) thead th:first-child,#sysSecurityApp .ofa-guided:not(:has(.ofa-bulk[open])) .ofa-group-row button{display:none}
#sysSecurityApp .ofa-guided .ofa-table{border:1px solid var(--sysdash-line);border-radius:3px}
#sysSecurityApp .ofa-guided .ofa-table td{padding:10px 14px}
#sysSecurityApp .ofa-guided .ofa-table tbody tr:not(.ofa-group-row):hover{background:var(--sysdash-surface-2)}
#sysSecurityApp .ofa-guided .ofa-grant{display:inline-flex;align-items:center;gap:6px;min-height:34px;padding:3px 10px;border:1px solid var(--sysdash-line);border-radius:3px;cursor:pointer}
#sysSecurityApp .ofa-grant.is-allowed{color:var(--sysdash-accent-2);background:color-mix(in srgb,var(--sysdash-accent-2) 9%,var(--sysdash-surface));border-color:var(--sysdash-accent-2)}
#sysSecurityApp .ofa-grant.is-denied{color:var(--sysdash-muted-strong)}
#sysSecurityApp .ofa-grant.is-unavailable{color:var(--sysdash-muted-strong);cursor:default}
#sysSecurityApp .ofa-guided .ofa-footer.has-changes{position:sticky;bottom:0;z-index:2;border-top:3px solid var(--sysdash-accent);box-shadow:0 -3px 10px #0001}
#sysSecurityApp .ofa-guided .ofa-footer>div:last-child{display:flex;gap:8px;flex-wrap:wrap}
@media(max-width:650px){#sysSecurityApp .ofa-guided{padding:10px}#sysSecurityApp .ofa-step-heading{flex-wrap:wrap}#sysSecurityApp .ofa-step-heading>div{flex:1;min-width:180px}#sysSecurityApp .ofa-step-heading .ofa-advanced-toggle{margin-left:44px}#sysSecurityApp .ofa-guided .ofa-selectors{grid-template-columns:minmax(0,1fr)}#sysSecurityApp .ofa-guided .ofa-footer>div:last-child{width:100%}}
#sysSecurityApp .ofa-status-filter{display:flex;align-items:center;gap:10px;margin:12px 0;font-weight:600}#sysSecurityApp .ofa-status-filter select{max-width:240px}#sysSecurityApp .ofa-table td .ofa-badge{display:inline-block;margin:4px 0 4px 8px;font-weight:400}#sysSecurityApp .ofa-guided .ofa-selectors{grid-template-columns:repeat(auto-fit,minmax(220px,1fr))}
/* Status labels stay lightweight; the text also conveys the state without color. */
#sysSecurityApp .ofa-table td .ofa-status{border:0;background:transparent;padding:2px 0;display:inline-flex;align-items:center;gap:6px;color:var(--sysdash-muted-strong)}
#sysSecurityApp .ofa-table td .ofa-status::before{content:'';width:7px;height:7px;flex:0 0 7px;border-radius:50%;background:currentColor}
#sysSecurityApp .ofa-table td .ofa-status.is-on{color:var(--sysdash-accent-2)}
#sysSecurityApp .ofa-table td .ofa-status.is-unknown{color:var(--sysdash-warning,#b8750b)}
#sysSecurityApp .ofa-guided .ofa-grant{border:0;background:transparent;padding:3px 0}
#sysSecurityApp .ofa-guided .ofa-grant.is-unavailable{color:var(--sysdash-warning,#b8750b)}