Description of problem:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Installation_and_Configuration_Guide/sect-Prerequisite_Message_Broker.html#sect-Install_and_Configure_the_RabbitMQ_Message_Broker

At present the service rabbitmq users created when following the above guide are not given permissions to access their respective resources, resulting in "access to vhost '/' refused for user '$service'" messages being logged.

Additional info:

The puppet profiles for cinder [1] and nova [2] appear to set ".*" ".*" ".*", can we get away with documenting the same or do we need more strict permissions in place?

[1] https://github.com/stackforge/puppet-cinder/blob/master/manifests/rabbitmq.pp#L57
[2] https://github.com/stackforge/puppet-nova/blob/master/manifests/rabbitmq.pp#L62