Table of contents

• Modifying the DBeaver configuration file
• Using Windows Registry
  • Configuration options
    • Registry and configuration file parameters
    • Configuration file parameters

This guide outlines the steps for enhancing security and control in DBeaver by restricting specific functionalities.

For Windows, Mac, and Linux, restrictions in the dbeaver.ini file can be implemented, while Windows users can also leverage the Registry for additional control.

Tip: Detailed instructions on finding dbeaver.ini are available in our article.

Follow the appropriate steps based on your operating system and preference.

Modifying the DBeaver configuration file

1. Navigate to the directory containing the dbeaver.ini file.
2. Use a text editor to open the configuration file.
3. Locate the -vmargs line within the file.
4. Add the desired settings from the Configuration options, ensuring each setting is preceded by -D (for instance -Dpolicy.wd.check.disabled=true) and placed below the -vmargs line.
5. Save the edited file.
6. Restart DBeaver to apply changes.

Using Windows Registry

1. Open the Registry Editor by typing regedit in the Run dialog (Win + R).
2. Navigate to the following path in the Registry: HKEY_CURRENT_USER\Software\DBeaver Corp\DBeaver\policy
3. Create a new value for each setting, from the Configuration options based on desired restrictions.
4. Exit the Registry Editor and restart DBeaver to apply the changes.

Important: Editing the Windows Registry can significantly affect your system. Always make sure to back up the registry before making any changes. For more information on how to work with the Windows Registry, refer to the Microsoft Documentation on Registry Editing.

Configuration options

This section consolidates the configuration options, applicable through Windows Registry keys and as settings in the DBeaver configuration file.

Registry and configuration file parameters

This section outlines the parameters that can be configured either through the Windows Registry or directly in the dbeaver.ini.

Registry key/Variable Name	Type	Default value	Allowed values	Description
policy.data.export.disabled	DWORD/Boolean	0/false	0/false, 1/true	Restricts ability to export data from databases.
policy.data.import.disabled	DWORD/Boolean	0/false	0/false, 1/true	Restricts ability to import data to databases.
policy.data.copy.disabled	DWORD/Boolean	0/false	0/false, 1/true	Restricts ability to copy data from databases.
policy.data.edit.disabled	DWORD/Boolean	0/false	0/false, 1/true	Restricts ability to edit data in databases.
policy.sql.execution.disabled	DWORD/Boolean	0/false	0/false, 1/true	Restricts ability to execute SQL scripts.
policy.software.install.disabled	DWORD/Boolean	0/false	0/false, 1/true	Blocks ability to install new software and access the Eclipse marketplace.
policy.software.update.disabled	DWORD/Boolean	0/false	0/false, 1/true	Prevents ability to check for DBeaver updates.
connection.credentials.save.restricted	DWORD/Boolean	0/false	0/false, 1/true	Disables the ability to save database credentials across all user profiles.
policy.wd.check.disabled	DWORD/Boolean	0/false	0/false, 1/true	Disables the Windows Defender SmartScreen check at startup.

Configuration file parameters

This section details the parameters that can be set only in the dbeaver.ini.

Variable Name	Default Value	Allowed Values	Description
dbeaver.disable.secure.masking	false	false, true	Disables the masking of sensitive information in log files.