rustfs/crates/iam/AGENTS.md

IAM Crate Instructions

Applies to crates/iam/.

Security Boundaries

• Treat IAM changes as security-sensitive by default.
• Never log secrets, tokens, private claims, or credential material.
• Keep deny/allow evaluation behavior consistent with existing tests unless explicitly changing policy semantics.

Contract Stability

• Preserve compatibility of user/group/policy attachment behavior and token claim handling.
• When changing IAM interfaces, verify impacted call sites in:
  • rustfs/src/auth.rs
  • rustfs/src/admin/
  • crates/policy/

Error Handling

• Return explicit errors; do not use panic-driven control flow outside tests.
• Keep error messages actionable but avoid leaking sensitive context.

Suggested Validation

• cargo test -p rustfs-iam
• Full gate before commit: make pre-commit