update permission of paste config to 600

to ensure that any system users cannot read
credentials stored in the file.

manifests/base.pp

@@ -37,7 +37,9 @@ class cinder::base (
     mode => '0600',
   }
 
-  file { $::cinder::params::cinder_paste_api_ini: }
+  file { $::cinder::params::cinder_paste_api_ini:
+    mode => '0600',
+  }
 
   # Temporary fixes
   file { ['/var/log/cinder', '/var/lib/cinder']:

spec/classes/cinder_base_spec.rb

@@ -40,5 +40,13 @@ describe 'cinder::base' do
       )
     end
 
+    it { should contain_file('/etc/cinder/cinder.conf').with(
+      :mode => '0600'
+    ) }
+
+    it { should contain_file('/etc/cinder/api-paste.ini').with(
+      :mode => '0600'
+    ) }
+
   end
 end