commit e8bc2b82a04f4cca251ed7437f738672107428a3
author Jamie Lennox <jamielennox@redhat.com> Tue Feb 10 20:38:56 2015 +1100
committer Jamie Lennox <jamielennox@redhat.com> Wed Feb 11 14:49:56 2015 +1100
tree 4a8125751858323656c1f8afdf927c508926ade2
parent 8ed3e40be8672aa23ebd2b6c95accf06a2ff8ac4

Reduce service user permissions

Most of the services create the service user with the admin permission.
This is unnecessary for token validation and they should be restricted
to only having the service role.

Change-Id: Id7a9366d2c6a36139240f64371002362dc2d8d3b

lib/cinder

diff --git a/lib/cinder b/lib/cinder
index 12ba51e..17a0cc3 100644
--- a/lib/cinder
+++ b/lib/cinder
@@ -333,7 +333,7 @@
     # Cinder
     if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
 
-        create_service_user "cinder" "admin"
+        create_service_user "cinder"
 
         if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then