diff --git a/apps/note/api/views.py b/apps/note/api/views.py
index 40fc4f4ed2d753c4f938804c354e97f32785177f..e70eb49e3dfbf0c6584ecd209a17719fddac4083 100644
--- a/apps/note/api/views.py
+++ b/apps/note/api/views.py
@@ -45,7 +45,7 @@ class NotePolymorphicViewSet(ReadOnlyProtectedModelViewSet):
         return queryset.distinct()
 
 
-class AliasViewSet(viewsets.ModelViewSet):
+class AliasViewSet(ReadProtectedModelViewSet):
     """
     REST API View set.
     The djangorestframework plugin will get all `Alias` objects, serialize it to JSON with the given serializer,