How to hide some list items from REST?

Hi All,

I was wondering whether it is possible to hide some list items from REST queries.

Let's say we have a list of "Deals" created by sales reps. Manager should be able to see all items. Sales reps should be able to see the only Deals they created. Implement that via code is not hard.

But if a person googles a bit and builds a REST query then they would be able to see the data they are not supposed to see.

Is that possible?

Thank you.