Currently in some of our code we use recurse => true on a file resource to manage file permissions on directories and sub directories of /opt/stackstorm. There is a more efficient way to do this in Puppet using: https://forge.puppet.com/npwalker/recursive_file_permissions