Did you check the Audit log?
The Audit Log feature in AEM logs all the activities performed in the system, including changes to user and group permissions.
To specifically log permission changes, you might need to create a custom event handler that listens for changes to the rep:policy nodes (whic...