log update actions on permissions; closes #749