FIX / Admin locks himself out of a container's configuration (#1255)

* use config right to access container config form

* update CHANGELOG.md

* import missing class

Author: Mary-Clb

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [Unreleased]
+
+### Fixed
+
+- Fix administrators losing access to a block's configuration after setting a profile to "no access" on that block.
+
 ## [1.24.5] - 2026-09-11
 
 ### Fixed

front/container.form.php

@@ -73,12 +73,9 @@
     Html::back();
 } else {
 
-    if ((int) $_GET['id'] > 0) {
-        $right = PluginFieldsProfile::getRightOnContainer($_SESSION['glpiactiveprofile']['id'], $_GET['id']);
-        if ($right < READ) {
-            throw new AccessDeniedHttpException();
-        }
-    }
+    // Admin config screen: gate with the standard "config" right, not the per-profile
+    // block-visibility right (which would let an admin lock himself out of the config).
+    $container->check((int) $_GET['id'] > 0 ? (int) $_GET['id'] : -1, READ);
 
     Html::header(
         __('Additional fields', 'fields'),