Logging must be enabled for cases (before the events happens) or else you will not get all details you asked here.
Under server settings you will you can enable what should be locked.
For question about finding users with permissions: You should do a permreset to make sure all users with hidden permissions lose these.
3 Likes