Identifying missing privilege from SQL Debug output in STDOUT log

Hi All,

Am facing a strange issue recently. In our 9.3.1.1 system, a particular user is unable to view the BOM table attributes in a particular subclass although required Read privileges are there in his profile.
What's more strange is that this issue is happening only in Prod environment & not lower one, whereas both have exactly same configuration settings. Basically the privileges were transported from lower environment to higher with ACP.

We have hundreds of privilege-mask in our system so it's extremely difficult to identify the root cause.

Can someone help me identify with any easy way the missing privileges ? I've tried by enabling debug level logging for SQL outputs in STDOUT log. But there are so many queries that am getting lost.