You need to allow the user access only to the video file, and then revoke access once the user no longer needs it