security: batch 1 — DCI/Key admin privilege escalations, OAuth signing keys, GRM rule ACL (#327, #329, #265, #266) - #399

Merged

gonzalesedwin1123 merged 12 commits into

19.0from

19.0-staging-sec-batch1

Aug 13, 2026

Commits on Jul 28, 2026

security(dci): stop DCI Administrator group from granting system admin (#327)
gonzalesedwin1123
authored
ec4493d
security(key_management): stop Key Management Admin group from granting system admin (#329)
gonzalesedwin1123
authored
a92701b
security(oauth): restrict OAuth signing-key settings to system admins (#265)
gonzalesedwin1123
authored
f0a58b0
security(grm): restrict GRM automation rules to GRM staff (drop portal write/create) (#266)
gonzalesedwin1123
authored
f450212

Commits on Aug 10, 2026

Merge 19.0 into 19.0-staging-sec-batch1
gonzalesedwin1123
committed
07a0ad3

Commits on Aug 13, 2026