We would like to apply the restrictions of the access control profile, scheduling and moderation in th KMC to these links which serves the video players.
The cause of this is, these links are always available for download and further embedding in other sides without any error, even if no access control profile, scheduling or meoderation state are allowing this.
We are looking for the right place in the code where we could implement some code to make these links:
"https://www.xyz.com/p/105/sp/10300/serveFlavor/entryId/0_1r42g4bn/v/2/flavorId/0_v5t5j6m4/forceproxy/true/name/a.mp4"
more secure
The reason is the privacy of the entries so they should not be easily downloadable or sharable this way.
One solution could be we change the RewriteRule in the apache configurations
RewriteRule (?<!extwidget)/serveFlavor/(.*)$ /index.php/extwidget/serveFlavor/$1 [L]
to an own script which checks the restrictions and let them head to /index.php/extwidget/serveFlavor/$1 or not.
but I am looking for the part of code where the /index.php/extwidget/serveFlavor/$1 me leads to.
Thank you