Has some command that lists the privileges of a user in db2?
You can use the system catalog views.

Generally speaking any view SYSCAT.xxxxxAUTH will show the authorizations for that particular area.

Examples include SYSCAT.DBAUTH is authorizations at the database level. SYSCAT.ROLEAUTH is authorizations to roles. SYSCAT.INDEXAUTH is authorizations for indexes, etc.