2026.3.0
Upgrade Notes
When upgrading to this version it is important to set the following custom runtime setting on your AppControl server:
com.mendix.webui.StateSizeWarningThreshold = 10000
This is needed to prevent excessive warnings in the AppControl system logs.
New Features
[POLICIES] Data Policy Management AppControl now supports Data Policy management, enabling organizations to classify data and validate module and user roles directly within the platform.
[POLICIES] New Policy Checks Six new policy checks have been added to the platform:
(APP_0014) Data is classified — verifies that entities and attributes in the domain model have been assigned a data classification level. (DOM_0009) Module roles are validated — checks that module roles are correctly defined and assigned. (APP_0015) User roles are validated — verifies that user roles are properly configured across the application. (APP_0007) Anonymous role is restricted — ensures that the anonymous user role does not have excessive access rights. (APP_0016) Default user role is restricted — validates that the default user role is appropriately restricted. (APP_0008) System administrator role is restricted — checks that the system administrator role is scoped correctly and not overexposed.
Improvements
[CORE] Harden Entity Access Entity access has been reviewed and tightened across the platform to improve security posture.
[CORE] Upgrade SAML and SQLite Updated SAML and SQLite dependencies to their latest supported versions for improved security and compatibility.
[POLICIES] Add Re-check Now Option to Revisions Users can now manually trigger a re-check on revisions, providing more control over validation timing.
[CORE] Manually Acknowledge Alerts Users can now manually acknowledge alerts, providing greater control over alert management workflows.
Resolved Issues
[RELEASES] Deployed revision not updated automatically after release Resolved an issue where the deployed revision was not automatically updated following a successful release.
[RELEASES] Cancel button visible after release completes Fixed an issue where the cancel button remained visible after a release had already completed.
[RELEASES] Build task failing due to long descriptions Resolved an exception that occurred when a build task description exceeded 2000 characters.
[RELEASES] Task scheduling visibility Fixed an issue where task scheduling options were incorrectly visible for on-demand releases.
[TASKS] Multiselect filter for status in task assignment overview The task assignment overview now supports multiselect filtering by status, making it easier to manage and review tasks across multiple states.
[CORE] Reusing Mendix app IDs causes app list update to fail Resolved an issue where reusing Mendix app IDs caused the app list update process to fail.
[CORE] Removing user from user group should not remove rights if in another group Fixed an issue where removing a user from a user group incorrectly revoked rights that were still granted via another group membership.
[POLICIES] DOM_0005 max entities check not working Resolved an issue where the DOM_0005 policy check for maximum entities was not functioning correctly.
Last updated