yeah it’s a bit obscure that the user needs access to that content-type to set relations, do be careful though as enabling that permission will grant them access to the find-all endpoint, you may want to create a route policy/middleware for that route if you don’t want them to use it.