Check out this how to documentation: https://docs.mendix.com/howto/security/create-a-secure-app
It shows you how to implement security on application and module level.