Hi,

Restricting the creation of customer, supplier and contacts are easy, in the users form view you can can see a group named contact creation(name might be change).

Just untick it for the users and check the above restrictions.

For the restriction of the product creation you rewrite the existing rules and acess rights given for the product model without create option.

Thanks