Allow acces to specific interface based on IP and MAC

RouterOS Beginner Basics
1

Hello,

I want to implement a specific solution:

PORT1 connect to LAN device 192.168.1.1
PORT2 connect to LAN device 192.168.1.2 with MAC xx:xx:xx:xx:xx:xx and further client devices 192.168.1.3-1.254
PORT3 connect to LAN 192.168.2.x

All Clients on PORT2 192.168.1.2-192.168.1.254 should be able to access PORT1

Client 192.168.1.2 on PORT2 should be able to access PORT3 based on IP and MAC filtering (for example allow access to 192.168.2.20), all other clients on PORT2 should not be able to access PORT3

How can this be implemented with Mikrotik RB260GS?