Fix: models using Fields containers hidden and not injected with Fields >= 1.24.7

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 ### Fixed
 
 - Fix the uploaded file name being lost after the client injection upload step
+- Fix models using `Fields` plugin containers being hidden and their values not injected with `Fields` >= 1.24.7
 
 ## [2.15.12] - 2026-10-05
 

inc/commoninjectionlib.class.php

@@ -1799,7 +1799,9 @@ private function effectiveAddOrUpdate($injectionClass, $item, $values, $add = tr
 
         //The plugin acts as the front controller here: rights must be checked before writing.
         //Skipped without a session, as the lib is also a programmatic entry point for scripts.
-        if (Session::getLoginUserID() !== false) {
+        //Fields >= 1.24.7 containers always deny rights: their values are written
+        //as part of the parent item, whose rights have already been checked
+        if (Session::getLoginUserID() !== false && !is_a($item, 'PluginFieldsAbstractContainerInstance')) {
             $input = is_array($values) ? $values : [];
             if ($add) {
                 //Passing the input to can() makes the check cover the target entity

inc/model.class.php

@@ -1289,7 +1289,11 @@ public static function checkRightOnModel(int $models_id): bool
             if ($itemtype == PluginDatainjectionInjectionType::NO_VALUE || !is_a($itemtype, CommonDBTM::class, true)) {
                 continue;
             }
-
+            // Fields >= 1.24.7: container classes always deny canCreate()/canUpdate(),
+            // their values are written through the parent item, whose rights are checked instead
+            if (is_a($itemtype, 'PluginFieldsAbstractContainerInstance', true)) {
+                continue;
+            }
             $item = new $itemtype();
             if ($check_add && !$item->canCreate()) {
                 return false;