In reading the documentation of the database tables, I do not see a
field for who granted a user access to sharepoint or changed that
persons permissions. However, I don't know if this information is
available through the object model? Has anyone looked for this before?