Merge pull request #11650 from strapi/v4/remove-relation-private-cts

Prevent relation to api token and locale

packages/core/content-type-builder/server/services/content-types.js

@@ -19,7 +19,11 @@ const getRestrictRelationsTo = (contentType = {}) => {
     return ['oneWay', 'manyWay'];
   }
 
-  if (uid.startsWith(coreUids.PREFIX) || uid === pluginsUids.UPLOAD_FILE) {
+  if (
+    uid.startsWith(coreUids.PREFIX) ||
+    uid === pluginsUids.UPLOAD_FILE ||
+    !isContentTypeVisible(contentType)
+  ) {
     return [];
   }
 

packages/plugins/users-permissions/server/content-types/permission/index.js

@@ -13,6 +13,9 @@ module.exports = {
     'content-manager': {
       visible: false,
     },
+    'content-type-builder': {
+      visible: false,
+    },
   },
   attributes: {
     action: {

packages/plugins/users-permissions/server/content-types/role/index.js

@@ -13,6 +13,9 @@ module.exports = {
     'content-manager': {
       visible: false,
     },
+    'content-type-builder': {
+      visible: false,
+    },
   },
   attributes: {
     name: {