diff --git a/packages/core/admin/server/services/permission/permissions-manager/sanitize.js b/packages/core/admin/server/services/permission/permissions-manager/sanitize.js
index a173d53b21..675d63b635 100644
--- a/packages/core/admin/server/services/permission/permissions-manager/sanitize.js
+++ b/packages/core/admin/server/services/permission/permissions-manager/sanitize.js
@@ -273,6 +273,8 @@ module.exports = ({ action, ability, model }) => {
       CREATED_AT_ATTRIBUTE,
       UPDATED_AT_ATTRIBUTE,
       PUBLISHED_AT_ATTRIBUTE,
+      CREATED_BY_ATTRIBUTE,
+      UPDATED_BY_ATTRIBUTE,
     ]);
   };
 
diff --git a/packages/core/strapi/lib/core/domain/content-type/index.js b/packages/core/strapi/lib/core/domain/content-type/index.js
index b3deedcb58..209671219e 100644
--- a/packages/core/strapi/lib/core/domain/content-type/index.js
+++ b/packages/core/strapi/lib/core/domain/content-type/index.js
@@ -85,11 +85,10 @@ const createContentType = (uid, definition) => {
     relation: 'oneToOne',
     target: 'admin::user',
     configurable: false,
-    writable: true,
+    writable: false,
     visible: false,
     useJoinTable: false,
     private: isPrivate,
-    hidden: true,
   };
 
   schema.attributes[UPDATED_BY_ATTRIBUTE] = {