Enhanced Security Mode, also called Secure Mode, is a system-wide setting that a global administrator enables for an entire SmartSimple instance. It hardens the instance by turning off functions that are not advisable for organizations with strict security requirements, such as government agencies. When Enhanced Security Mode is active, SmartSimple applies a fixed set of security configurations, makes them read-only, and restricts features that could introduce risk.
Global administrators use Enhanced Security Mode to align an instance with the heightened data protection and access standards that security-conscious clients expect, prioritizing reduced risk exposure over access to optional functions.
Who: Global administrators
When to Use Enhanced Security Mode
A global administrator enables Enhanced Security Mode by clicking the System Administration gear in the upper navigation bar, selecting Global Settings, clicking the Security tab, and toggling Enable Enhanced Security Mode on. Use Enhanced Security Mode when:
- A SmartSimple instance serves clients that require predefined, locked security settings.
- An organization needs certain settings to remain enabled once turned on, with no option to disable them afterward.
- A client security policy prohibits higher-risk functions, such as rich text fields or executable file uploads.
What Enhanced Security Mode Changes
When Enhanced Security Mode is activated, SmartSimple makes the following changes across the instance:
- Applies a predefined set of security settings and makes them read-only.
- Disables permissions for legacy applications and menu functions.
- Converts all rich text fields to multi-line text fields and prevents the creation or import of new rich text fields.
- Blocks the upload of files that use the .exe extension.
Security Implications
Enhanced Security Mode reduces the system's attack surface by removing functions that can introduce risk and by locking certain security settings in place. Converting rich text fields to multi-line text fields and blocking executable file uploads further limits the ways that unsafe content can enter the system. These changes remove some flexibility, so Enhanced Security Mode is best suited to instances where meeting strict client security standards is the priority.
Resources
For more information about security, see: