Log event for user obtaining updated database privileges

In order to signalize any updated database access privilege, which might be mistaken or applied to a wider ranged than intended , we want to have a log message in the adopter-log whenever a person or a group has been granted read and or write access to the database, a folder of the database or a group of folders in the database. The following information should be expressed in the log file message: effected user or effected user group, the actor (user), time, database / folder name or id (s), new rights.