check user audit security

Make sure user can only see logs on objects they are allowed to. For membership logs, should be on groups they can READ/ADMIN. For priv logs, they can ADMIN, for attribute logs, needs ATTR_READ and READ on the ATTR.