Restrict the data based on products

Hello,

we have a requirement to restrict the access of leads and opportunities based on products. For example, salesuser1 can see data, where mobile is selected as a product in leads and opportunities, and salesuser2 can see the data where the laptop is selected as a product in leads and opportunities, and salesuser2 cannot see the data where mobile is selected as a product.

I think we need to create a custom role for this but can you tell me exactly where I need to do changes for this? or any other way to achieve this requirement?.

Thanks,