diff --git a/app/controllers/api/base_controller.rb b/app/controllers/api/base_controller.rb
index 69457cee0..7354ad064 100644
--- a/app/controllers/api/base_controller.rb
+++ b/app/controllers/api/base_controller.rb
@@ -60,7 +60,7 @@ def query(model, params)
     end
 
     # restrict traits and yields by access level
-    if model == Trait || model == Yield
+    if model == Trait || model == Yield || model == TraitsAndYieldsView
       model = model.all_limited(current_user)
     end