Restricting content access to a domain

Hi,

I've been testing the Access Control Profile feature in the KMC to determine how I can restrict access of video content to only members of our community, i.e. people coming from the virginia.edu domain. It appears that the domain feature in the Access Control applies to the host where you place your Kaltura video references. For example, if I copy the object code for a media entry (via the preview and embed feature) into an HTML page that is physically located on the server lib.virginia.edu, then I can create an Access Control to play from only that domain and apply it to the media item. This means that this media item can only be accessed from HTML pages that reside on the lib.virginia.edu site.

If I want content restricted so that only people from virginia.edu can see it without caring where the media reference resides on the web, how do I do that? One of my colleagues indicated that a Kaltura employee said you do that by adding some configuration parameter to the code you place in your HTML pages. But I can't find any documentation here on the Kaltura site that provides insight on how to do this. Has anyone else needed to do this and figured out how it is done?

My other concern is that putting this in the player configuration does not prevent someone else from coming along and viewing the source and grabbing the video reference and placing it somewhere else and removing the parameter that restricts who can access it if done in the player code.

The only solution I can come up with is that I apply the domain rule via the KMC Access Control Profile to all media items that need to be restricted. Then from the host where the content can be played, I put in HTACCESS restrictions.

Anyone else have any other thoughts on this.

Thanks,
Jack