> For the complete documentation index, see [llms.txt](https://docs.bluestorm.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bluestorm.io/checks/domain_model/dom_0009.md).

# Module roles are validated

<table><thead><tr><th width="138">Check ID</th><th>DOM_0009</th></tr></thead><tbody><tr><td>Category</td><td>Security</td></tr><tr><td>Summary</td><td><p>AppControl allows you to define a data policy for your application that validates the access rules configured for your Mendix entities. This check verifies that all access rules and member access rules across all modules and entities have been reviewed and validated.</p><p>Validating module roles confirms that you have reviewed which module roles can access each entity, what their create and delete rights are, any XPath constraints that apply, and what read/write access they have to individual attributes and associations.</p></td></tr><tr><td>Options</td><td>There are no options for this check.</td></tr><tr><td>Pass</td><td>All access rules and member access rules across all modules and entities in the application have been validated.</td></tr><tr><td>Fail</td><td>One or more access rules or member access rules have not yet been validated. Navigate to the data policy for this application and open the Module Roles tab. Review any items showing a warning icon and mark them as validated once you have confirmed the configuration is correct.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.bluestorm.io/checks/domain_model/dom_0009.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
Check ID	DOM_0009
Category	Security
Summary	AppControl allows you to define a data policy for your application that validates the access rules configured for your Mendix entities. This check verifies that all access rules and member access rules across all modules and entities have been reviewed and validated. Validating module roles confirms that you have reviewed which module roles can access each entity, what their create and delete rights are, any XPath constraints that apply, and what read/write access they have to individual attributes and associations.
Options	There are no options for this check.
Pass	All access rules and member access rules across all modules and entities in the application have been validated.
Fail	One or more access rules or member access rules have not yet been validated. Navigate to the data policy for this application and open the Module Roles tab. Review any items showing a warning icon and mark them as validated once you have confirmed the configuration is correct.