select 
  'revoke '||privilege||' '
||case objecttype when 'TABLESPACE' then 'of' else 'on' end||' '
||case when objecttype in ('MATERIALIZED QUERY TABLE', 'TABLE', 'VIEW') then 'TABLE' else objecttype end||' '
||rtrim(objectschema)||case when objectschema!='' and coalesce(objectname, '')!='' then '.' else '' end||coalesce(objectname, '')||' from '
||case when authid='PUBLIC' then '' else case authidtype when 'G' then 'GROUP' when 'U' then 'USER' when 'R' then 'ROLE' end end||' '
||authid
from sysibmadm.privileges
where not (authid=USER and authidtype='U')
and authid!='PUBLIC'
;

select 'revoke '||substr(
  case BINDADDAUTH when 'Y' then ', BINDADD' else '' end
||case CONNECTAUTH when 'Y' then ', CONNECT' else '' end
||case CREATETABAUTH when 'Y' then ', CREATETAB' else '' end
||case DBADMAUTH when 'Y' then ', DBADM' else '' end
||case EXTERNALROUTINEAUTH when 'Y' then ', CREATE_EXTERNAL_ROUTINE' else '' end
||case IMPLSCHEMAAUTH when 'Y' then ', IMPLICIT_SCHEMA' else '' end
||case LOADAUTH when 'Y' then ', LOAD' else '' end
||case NOFENCEAUTH when 'Y' then ', CREATE_NOT_FENCED_ROUTINE' else '' end
||case QUIESCECONNECTAUTH when 'Y' then ', QUIESCE_CONNECT' else '' end
||case SECURITYADMAUTH when 'Y' then ', SECADM' else '' end
,  3 )||' from '
||case grantee when 'PUBLIC' then '' else case granteetype when 'G' then 'GROUP' when 'U' then 'USER' when 'R' then 'ROLE' end||' ' end
||grantee
from syscat.dbauth
where not (grantee=USER and granteetype='U')
and grantee!='PUBLIC'
;