Role Permissions filter child items

So, I am using REST API to get data. And when I get data from Quotation, it returns all filtered data that I have put on Role Permissions manager. But when I call Quotation Item it returns all items. Even those from other customers.

Any idea how to filter this in Role Permission manager?