diff --git a/ydb/core/mon/mon.cpp b/ydb/core/mon/mon.cpp index de7d94312f37..2b26971ec752 100644 --- a/ydb/core/mon/mon.cpp +++ b/ydb/core/mon/mon.cpp @@ -1450,7 +1450,7 @@ NMonitoring::IMonPage* TMon::RegisterActorPage(TRegisterActorPageFields fields) fields.PreTag, fields.ActorSystem, fields.ActorId, - fields.AllowedSIDs ? fields.AllowedSIDs : Config.AllowedSIDs, + (fields.AllowedSIDs || !fields.UseFallbackSIDs) ? fields.AllowedSIDs : Config.AllowedSIDs, fields.UseAuth ? Config.Authorizer : TRequestAuthorizer(), fields.MonServiceName); if (fields.Index) { diff --git a/ydb/core/mon/mon.h b/ydb/core/mon/mon.h index e27fece95954..c2027baaedaa 100644 --- a/ydb/core/mon/mon.h +++ b/ydb/core/mon/mon.h @@ -61,6 +61,7 @@ class TMon { TActorId ActorId; bool UseAuth = true; TVector AllowedSIDs; + bool UseFallbackSIDs = true; bool SortPages = true; TString MonServiceName = "utils"; }; diff --git a/ydb/core/viewer/viewer.cpp b/ydb/core/viewer/viewer.cpp index 0a85e1e0671a..3556b6393f83 100644 --- a/ydb/core/viewer/viewer.cpp +++ b/ydb/core/viewer/viewer.cpp @@ -92,13 +92,15 @@ class TViewer : public TActorBootstrapped, public IViewer { .RelPath = "viewer/whoami", .ActorSystem = ctx.ActorSystem(), .ActorId = ctx.SelfID, - .UseAuth = false, + .UseAuth = true, + .UseFallbackSIDs = false, }); mon->RegisterActorPage({ .RelPath = "viewer/json/whoami", // temporary handling of old paths .ActorSystem = ctx.ActorSystem(), .ActorId = ctx.SelfID, - .UseAuth = false, + .UseAuth = true, + .UseFallbackSIDs = false, }); mon->RegisterActorPage({ .Title = "Viewer",