Hi,

there is a module for that: https://apps.odoo.com/apps/modules/11.0/product_access_restriction/

You can control the Access Rights for any models in odoo. In this case, you are wanting to edit the product.product (and possibly product.template) access rights. Make sure you have technical features enabled for the user you are logged into. 

1. Go to Settings > Technical > Database Structure > Models

2. Search for the model you want to change (product.product). 

3. Select the product and go to Edit. Select the second tab that reads "Access Rights".

4. Select the Read, Write, Create and Delete permissions you want each group to have. (You can control groups and membership of groups under the "Users" section of the same Settings tab. 

These permissions are typical CRUD rights common to most databases. You can learn more here: http://en.wikipedia.org/wiki/Create,_read,_update_and_delete.

I should add that, in my experience, you may find out after adjusting permissions that your users need access rights to unexpected models to accomplish your goals. Odoo error reporting does a good job of throwing errors in a popup with the model listed so you know to change it.