I'm not sure this is recorded in a log, but if it is then most likely it will be portal.log found in the wasp directory. But even if it is written to it, there are two potential conditions making it impossible to see who set the permissions:
1 the logging level was too low
2 the logs rolled over and so that information is gone