Add flag to enable/disable UI DB access (#7144)

* Add new config for showing DB access in admin panel.
* Update route registrationt to respect new flag.
* Update web.config with new flag.

Author: ryuyu

src/NuGetGallery/Areas/Admin/AdminAreaRegistration.cs

@@ -5,6 +5,7 @@
 using Autofac.Features.Indexed;
 using NuGet.Services.Sql;
 using NuGetGallery.Areas.Admin.DynamicData;
+using NuGetGallery.Configuration;
 
 namespace NuGetGallery.Areas.Admin
 {
@@ -16,10 +17,15 @@ public class AdminAreaRegistration : AreaRegistration
 
         public override void RegisterArea(AreaRegistrationContext context)
         {
-            var galleryDbConnectionFactory = DependencyResolver.Current.GetService<ISqlConnectionFactory>();
+            var galleryConfigurationService = DependencyResolver.Current.GetService<IGalleryConfigurationService>();
+
+            if (galleryConfigurationService.Current.AdminPanelDatabaseAccessEnabled)
+            {
+                var galleryDbConnectionFactory = DependencyResolver.Current.GetService<ISqlConnectionFactory>();
+                DynamicDataManager.Register(context.Routes, "Admin/Database", galleryDbConnectionFactory);
+            }
 
             context.Routes.Ignore("Admin/Errors.axd/{*pathInfo}"); // ELMAH owns this root
-            DynamicDataManager.Register(context.Routes, "Admin/Database", galleryDbConnectionFactory);
 
             context.MapRoute(
                 "Admin_default",

src/NuGetGallery/Areas/Admin/Controllers/HomeController.cs

@@ -23,6 +23,7 @@ public HomeController(IContentService content, IGalleryConfigurationService conf
         public virtual ActionResult Index()
         {
             var viewModel = new HomeViewModel(
+                showDatabaseAdmin: _config.Current.AdminPanelDatabaseAccessEnabled,
                 showValidation: _config.Current.AsynchronousPackageValidationEnabled);
 
             return View(viewModel);

src/NuGetGallery/Areas/Admin/ViewModels/HomeViewModel.cs

@@ -5,11 +5,14 @@ namespace NuGetGallery.Areas.Admin.ViewModels
 {
     public class HomeViewModel
     {
-        public HomeViewModel(bool showValidation)
+        public HomeViewModel(bool showDatabaseAdmin, bool showValidation)
         {
+            ShowDatabaseAdmin = showDatabaseAdmin;
             ShowValidation = showValidation;
         }
 
+        public bool ShowDatabaseAdmin { get; }
+
         public bool ShowValidation { get; }
     }
 }

src/NuGetGallery/Areas/Admin/Views/Home/Index.cshtml

@@ -7,17 +7,20 @@
 <section role="main" class="container main-container">
     <h1>Site Administration</h1>
     <ul>
-        <li>
-            <h2>
-                <a href="~/Admin/Database">
-                    <i class="ms-Icon ms-Icon--Database"></i>
-                    <span>Database Administration</span>
-                </a>
-            </h2>
-            <p>
-                Get direct access to the database to manipulate Users, Packages, etc. USE WITH CAUTION.
-            </p>
-        </li>
+        @if (Model.ShowDatabaseAdmin)
+        {
+            <li>
+                <h2>
+                    <a href="~/Admin/Database">
+                        <i class="ms-Icon ms-Icon--Database"></i>
+                        <span>Database Administration</span>
+                    </a>
+                </h2>
+                <p>
+                    Get direct access to the database to manipulate Users, Packages, etc. USE WITH CAUTION.
+                </p>
+            </li>
+        }
         <li>
             <h2>
                 <a href="~/Admin/Errors.axd">

src/NuGetGallery/Configuration/AppConfiguration.cs

@@ -72,6 +72,8 @@ public class AppConfiguration : IAppConfiguration
 
         public TimeSpan FeatureFlagsRefreshInterval { get; set; }
 
+        public bool AdminPanelDatabaseAccessEnabled { get; set; }
+
         public bool AsynchronousPackageValidationEnabled { get; set; }
 
         public bool BlockingAsynchronousPackageValidationEnabled { get; set; }

src/NuGetGallery/Configuration/IAppConfiguration.cs

@@ -95,6 +95,11 @@ public interface IAppConfiguration : IMessageServiceConfiguration
         /// </summary>
         TimeSpan FeatureFlagsRefreshInterval { get; set; }
 
+        /// <summary>
+        /// Gets a boolean indicating whether DB admin through web UI should be accesible.
+        /// </summary>
+        bool AdminPanelDatabaseAccessEnabled { get; set; }
+
         /// <summary>
         /// Gets a boolean indicating whether asynchronous package validation is enabled.
         /// </summary>

src/NuGetGallery/Web.config

@@ -38,6 +38,7 @@
     <add key="Gallery.AzureStorageReadAccessGeoRedundant" value="false"/>
     <!-- If the storage account has to fall-back to a secondary (when Read Access Geo Redundant is enabled in Azure storage), change Gallery.AzureStorageReadAccessGeoRedundant to true -->
     <add key="Gallery.FeatureFlagsRefreshInterval" value="00:01:00" />
+    <add key="Gallery.AdminPanelDatabaseAccessEnabled" value="false"/>
     <add key="Gallery.AsynchronousPackageValidationEnabled" value="false"/>
     <add key="Gallery.BlockingAsynchronousPackageValidationEnabled" value="false"/>
     <add key="Gallery.AsynchronousPackageValidationDelay" value="00:00:05"/>