Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/en/docs/apidocs-mxsdk/apidocs/audit-logs-api.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,4 +34,4 @@ Two types of Authorization headers are supported: `Bearer` (Client credentials o

The following API reference includes information on which scope and token type is required for each endpoint.

{{< swaggerui src="/openapi-spec/audit-logging-v1.yaml" >}}
{{< swaggerui src="/openapi-spec/audit-logging-v1.yaml" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -482,7 +482,6 @@ Then the Studio Pro UI for the property appears like this:

### Action {#action}


The action property type allows a user to configure an action which can do things like call nanoflows, save changes, and open pages.

If a `dataSource` attribute is not specified, the client will receive an `ActionValue` representing the action or `undefined` if the **Do nothing** action was selected.
Expand Down Expand Up @@ -838,7 +837,6 @@ The [`action`](#action), [`attribute`](#attribute), [`association`](#association

### Selection {#selection}


The selection property allows a widget to read and set a selection that can be used in actions, expressions, or a `Listen to` data source of a data view.

#### XML Attributes
Expand Down Expand Up @@ -909,7 +907,6 @@ Label property allows a pluggable widget to have labeling functionality similar

#### setLabel {#setLabel}


You can use `setLabel` to specify which properties can be used to set the `Label` property value.

Configuring the value of a property with the `setLabel` attribute will automatically update the value of `Label`.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,8 @@ Below is a short summary of the key aspects of cluster visibility. For more info
* Visibility - All cluster namespace members can view initialized clusters to facilitate support and monitoring.
* Security - Only Cluster Managers with appropriate Azure RBAC roles (Owner or Contributor) can modify cluster settings.
* Separation of Concerns:
* Initialized clusters are visible to all namespace members regardless of Azure RBAC.
* Editing capabilities require both Cluster Manager role or Azure Owner or Contributor permissions.
* Initialized clusters are visible to all namespace members regardless of Azure RBAC.
* Editing capabilities require both Cluster Manager role or Azure Owner or Contributor permissions.

## Cluster Visibility

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -71,4 +71,5 @@ To deploy your app to Cloud Foundry, perform the following steps:
```

5. Run the `cf push` command.

6. Verify that the Mendix app has started successfully.
Original file line number Diff line number Diff line change
Expand Up @@ -225,6 +225,7 @@ If a call fails during testing, a generic error message is shown in the Agent Ed
### Including the Agent in the App Logic {#call-agent}

Include an agent in the app logic by calling it from a microflow. Agent Editor provides **Call Agent** toolbox actions in the **Agent Editor** category:

* **Call Agent without History** focuses on single-call, task-style execution
* **Call Agent with History** supports conversational scenarios with multiple messages

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,10 +57,10 @@ On the template details page, you can define the template with the following ite
{{% alert color="info" %}}If you use an uploaded Excel file as a template, the names of the sheets and columns in your template will be used. However, the background color in your template will be overruled by the **Background color** (including **none**) specified in the applicable style. {{% /alert %}}

* **Sanitize formulas to text**: When enabled, the module automatically sanitizes any string values that begin with potentially dangerous characters:
- `=` (equals)
- `+` (plus)
- `-` (minus/hyphen)
- `@` (at)
* `=` (equals)
* `+` (plus)
* `-` (minus/hyphen)
* `@` (at)

{{% alert color="info" %}} When sanitization is enabled, the exporter prepends a apostrophe (`'`) to any string value starting with these
characters. This forces Excel and CSV applications to treat the value as literal text rather than a formula.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ If you want to use specific resources, you should instead expose a new endpoint
9. Click **Back** to return to the **Details** page.
10. Click the **Ingestion Configuration** tab to set up your ingestion destination table.
11. Click **Create** to start setting up the Ingestion Configuration.
* **Target Database** – Name of the database for data ingestion
***Target Database** – Name of the database for data ingestion
* **Target Schema** – Target schema where all data will be ingested
12. Click **Save**.
13. Click the **Data Ingestion** tab, where you can start your data ingestion or set up a schedule.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ Because Snowflake conforms to the API specification of OpenAI, you can use the O

For example, the URL may look like the following: `https:/<snowflake_accountname>.snowflakecomputing.com/api/v2/cortex/v1/`.

5. Save your changes.
1. Save your changes.

{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/save-changes.png" >}}

Expand All @@ -52,24 +52,24 @@ Because Snowflake conforms to the API specification of OpenAI, you can use the O

{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/manage-deployed-models.png" >}}

2. Click **Add new model** to add an LLM from the [list of available LLMs](https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-rest-api#model-availability) in your Snowflake account.
1. Click **Add new model** to add an LLM from the [list of available LLMs](https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-rest-api#model-availability) in your Snowflake account.

{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/new-deployed-model.png" >}}

Alternatively, you can log into your Snowflake account with Snowsight and select **AI & ML > AI Studio > Cortex Playground**. The list in the top middle of the screen lists all available models.

The **Model name** field in the Deployed Model configuration in Mendix must match exactly with the model name in Snowflake.

3. Complete the configuration for your model.
4. Save your changes.
1. Complete the configuration for your model.
2. Save your changes.

3. Test the configuration by performing the following steps:

1. Hover over the **three dots** icon and select **Test** from the pop-up menu.

{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/test-option.png" >}}

2. Select your deployed model from the drop-down list.
3. Click **Test**.
1. Select your deployed model from the drop-down list.
2. Click **Test**.

{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/test.png" >}}
{{< figure src="/attachments/appstore/platform-supported-content/modules/snowflake-byok/test.png" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -410,7 +410,7 @@ After setting up the MCP server, you can now create a Mendix AI agent and connec
8. On the **Consumed MCP Services** page, click **MCP Client** and configure the following properties of your Snowflake MCP server:

1. Enter a name.
2. Specify the MCP endpoint in the following format: `https://<snoflake-account-id>.snowflakecomputing.com/api/v2/databases/<database name>/schemas/<schema name>/mcp-servers/<mcpserver name> `
2. Specify the MCP endpoint in the following format: `https://<snoflake-account-id>.snowflakecomputing.com/api/v2/databases/<database name>/schemas/<schema name>/mcp-servers/<mcpserver name>`

{{% alert color="info" %}}
If your Snowflake account ID contains underscores (`_`), replace them with `-` in the endpoint. This is only required for the account ID, not for the database name, schema name, or MCP server name.
Expand Down Expand Up @@ -472,4 +472,4 @@ The primary table is SNOWFLAKE_MCP_DEMO.TESTDATA.TICKETS:
- Always confirm successful operations by showing the user what was created or retrieved.
- Use fully qualified table names (DATABASE.SCHEMA.TABLE) in all tool calls.
- If a tool call returns an error, explain the issue clearly and suggest a correction.
```
```
1 change: 0 additions & 1 deletion content/en/docs/private-platform/nist-controls/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,4 +15,3 @@ Documents in this section provide more information about Private Mendix Platform
In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.

## Control Categories

Original file line number Diff line number Diff line change
Expand Up @@ -12,4 +12,4 @@ simple_list: true

Documents in this section provide more information about Private Mendix Platform's compliance with the Access Control (AC) category of the [NIST 800-53](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final) security framework. For each applicable control, we have listed which party (Mendix or the customer) is responsible for which component or aspect.

In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.
In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.
Original file line number Diff line number Diff line change
Expand Up @@ -67,4 +67,4 @@ Private Mendix Platform offers integrations to customer IdP over industry-standa

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-1.png" class="no-border" >}}

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -49,4 +49,4 @@ The user is logged out after the configured time period:

If the **Show notification** option is on, the user is alerted before they are logged out:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-02-1103-3.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-02-1103-3.png" class="no-border" >}}
26 changes: 13 additions & 13 deletions content/en/docs/private-platform/nist-controls/ac/pmp-nist-ac02.md
Original file line number Diff line number Diff line change
Expand Up @@ -42,19 +42,19 @@ The organization:
* Reviews accounts for compliance with account management requirements at an organization-defined frequency.
* Establishes a process for reissuing shared and group account credentials (if deployed) when individuals are removed from the group.

### Supplemental Guidance
### Supplemental Guidance

Information system account types include the following:

* Individual
* Shared
* Group
* System
* Guest or anonymous
* Emergency
* Developer, manufacturer, or vendor
* Temporary
* Service.
* Individual
* Shared
* Group
* System
* Guest or anonymous
* Emergency
* Developer, manufacturer, or vendor
* Temporary
* Service.

Some of the account management requirements listed above can be implemented by organizational information systems. The identification of authorized users of the information system and the specification of access privileges reflects the requirements in other security controls in the security plan.

Expand All @@ -66,8 +66,8 @@ The organization:

Conditions for disabling or deactivating accounts include, for example:

* When shared, group, emergency, or temporary accounts are no longer required
* When individuals are transferred or terminated.
* When shared, group, emergency, or temporary accounts are no longer required
* When individuals are transferred or terminated.

Some types of information system accounts may require specialized training.

Expand Down Expand Up @@ -120,4 +120,4 @@ Private Mendix Platform offers integrations to customer IdP over industry-standa

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-1.png" class="no-border" >}}

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -55,4 +55,4 @@ Private Mendix Platform offers integrations to customer IdP over industry-standa

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-1.png" class="no-border" >}}

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-01-2.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -36,4 +36,4 @@ Private Mendix Platform provides the setting to configure **Inactivity Period fo

Private Mendix Platform provides a setting to configure the inactivity period at **Settings > Identity & Access > Preferences**:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0203-1.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0203-1.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -41,4 +41,4 @@ As an example IdP, Microsoft Entra ID natively captures all account lifecycle ev
* For long-term log retention, audit logs should be forwarded to a Log Analytics Workspace or Azure Storage Account via Diagnostic Settings.
* Customers may implement alerts using their audit and logging management system of choice, such as Microsoft Sentinel or any third-party SIEM integrated by using Azure Event Hub.

Other IdP systems would offer similar approaches to fulfilling this control.
Other IdP systems would offer similar approaches to fulfilling this control.
Original file line number Diff line number Diff line change
Expand Up @@ -62,4 +62,4 @@ The Private Mendix Platform provides platform-level audit logs capturing account

The Mendix App Developer implements application-level audit logging within each Mendix application to capture user activity relevant to atypical usage detection. The customer ingests both platform and application logs into their monitoring tool of choice (for example, Microsoft Sentinel, Splunk Enterprise Security) and configures detection rules, alerting, and response workflows for atypical account behavior.

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0212-2.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0212-2.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -104,4 +104,4 @@ For row-level or attribute-based security, see below:

For Mendix Published API authentication and authorization, see below:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-03-3.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-03-3.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -51,4 +51,4 @@ For access rule configurations of the Mendix application model, see below:

Mendix role-based access control (RBAC) can be combined with microflows to enforce separation of information flows at runtime:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0412-2.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0412-2.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -60,4 +60,4 @@ The Platform provides dashboards and overviews for administrators to monitor gro

For more information about role and group management features, see [Dynamic Role Management](/private-mendix-platform/dynamic-role-management/).

For more information about application-level security and role assignment, see [Security Reference Guide](/refguide/security/).
For more information about application-level security and role assignment, see [Security Reference Guide](/refguide/security/).
Original file line number Diff line number Diff line change
Expand Up @@ -77,4 +77,4 @@ Define privileged roles to grant privileged permissions and only assign trusted

Review all role and group assignments from Private Mendix Platform administrator view:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0601-3.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0601-3.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -64,4 +64,4 @@ Customers should:
For more information, see the following documents:

* [Mendix Security Reference Guide](/refguide/security/)
* [Dynamic Role Management in Private Mendix Platform](/private-mendix-platform/dynamic-role-management/)
* [Dynamic Role Management in Private Mendix Platform](/private-mendix-platform/dynamic-role-management/)
Original file line number Diff line number Diff line change
Expand Up @@ -64,4 +64,4 @@ Customers should:
For more information, see the following documents:

* [Mendix Security Reference Guide](/refguide/security/)
* [Dynamic Role Management in Private Mendix Platform](/private-mendix-platform/dynamic-role-management/)
* [Dynamic Role Management in Private Mendix Platform](/private-mendix-platform/dynamic-role-management/)
Original file line number Diff line number Diff line change
Expand Up @@ -75,4 +75,4 @@ Audit logs provide evidence of privilege changes, reassignments, and removals:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0607-4.png" alt="Audit activity logs in Private Mendix Platform" class="no-border" >}}

Customers should retain documentation of privilege review activities and corrective actions as compliance evidence.
Customers should retain documentation of privilege review activities and corrective actions as compliance evidence.
Original file line number Diff line number Diff line change
Expand Up @@ -66,4 +66,4 @@ Private Mendix Platform offers a default runtime base image which uses normal us

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0608-2.png" class="no-border" >}}

For information about configuring Mendix storage plans with IRSA, see [Storage Plans](/developerportal/deploy/private-cloud-storage-plans/#walkthrough-aws-irsa).
For information about configuring Mendix storage plans with IRSA, see [Storage Plans](/developerportal/deploy/private-cloud-storage-plans/#walkthrough-aws-irsa).
Original file line number Diff line number Diff line change
Expand Up @@ -114,4 +114,4 @@ Private Mendix Platform provides the following settings to configure the period

Private Mendix Platform provides the following settings archive, back up, or download logs permanently after a period (duration) in days:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0609-5.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-0609-5.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -50,4 +50,4 @@ Private Mendix Platform provides the setting to configure **Failed Login Attempt

The setting to configure **Failed Login Attempts to Lockout** is available at **Settings > Identity & Access > Preferences**.

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-07-1.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-07-1.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ Private Mendix Platform displays an access banner on the login page:

Private Mendix Platform displays a banner after login:

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-08-3.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-08-3.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -38,4 +38,4 @@ Private Mendix Platform provides the setting to configure maximum concurrent ses

## Proof and Remarks

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-10-1.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-10-1.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -34,4 +34,4 @@ In Admin mode, Private Mendix Platform admins can access the **Logout All Users*

## Proof and Remarks

{{< figure src="/attachments/private-platform/nist-ac/nist-ac-12-1.png" class="no-border" >}}
{{< figure src="/attachments/private-platform/nist-ac/nist-ac-12-1.png" class="no-border" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -54,4 +54,4 @@ For more information, see the following documents:
For more information, see the following documents:

* [Set Up Anonymous User Security](/howto/security/set-up-anonymous-user-security/)
* [Create a Secure App](/howto/security/create-a-secure-app/)
* [Create a Secure App](/howto/security/create-a-secure-app/)
Loading