---
title: Access Control Contexts
url: https://docs.kaltura.com/docs/rich-media-cms-apis/content-management/access-control-access-control-contexts
---

## Access Control Contexts


Rules are evaluated based on the delivery context:

| Value | Name | Applied On |
|-------|------|------------|
| 1 | PLAY | playManifest requests (streaming playback) |
| 2 | DOWNLOAD | raw serve, download, flavorAsset.getUrl requests |
| 3 | THUMBNAIL | Dynamic thumbnail URL requests |
| 4 | METADATA | Metadata access (entry info) |

Set contexts on rules to enforce them selectively:


```bash
# Apply rule only to PLAY and DOWNLOAD contexts
-d "accessControlProfile[rules][0][contexts][0][objectType]=KalturaAccessControlContextTypeHolder" \
-d "accessControlProfile[rules][0][contexts][0][type]=1" \
-d "accessControlProfile[rules][0][contexts][1][objectType]=KalturaAccessControlContextTypeHolder" \
-d "accessControlProfile[rules][0][contexts][1][type]=2"
```


An entry can be viewable but not downloadable, or thumbnails can be accessible even when playback is restricted.