Can I restrict access by subledger application?

You can use data security policies to address such requirements.