Protect access before limiting player actions
Start by deciding which videos and documents are public, customer-only, partner-only or internal. Apply that decision consistently to the destination, the media and the supporting files. Hiding a page or disabling a player button is not the same as authenticating a viewer and checking what that viewer may access.
No browser setting can guarantee that a person who can watch content cannot record it. Use the controls appropriate to the risk, test the viewer experience with the intended account types, and review access when roles change. A knowledge answer or source link should respect the same audience boundaries as the original library.