Content restrictions for logged in user with specific role
This looks like a perfect use-case for hook_node_access with $op='view'. You check if the user is 'special' and apply your logic to approve/deny the view.
You could have a new role for this, or a new field on the product nodes, or some other idea. It very much depends on what your logic is there.