Privilege checks generate log entries. MODIFY is not a grantable privilege, so the system does not check for the MODIFY privilege. To MODIFY a DATABASE, PROFILE, or USER (except for certain self-referent changes) you must have the DROP privilege on the object to be modified. Specify the DROP operation if you want to log MODIFY requests.