log read permission is now only on user and group

Should avoid confusion and any potential security issues.