add permissions hook for wmf_audit

Change-Id: I2ce4b5a6df71ca90f149451e8dea8414d81d31c5