# OCS permissions API

**URL:** <https://help.nextcloud.com/t/ocs-permissions-api/231793>\
**Category:** 💻 Development\
**Tags:** groupfolders-app, teamfolders-app\
**Created:** [September 10, 2025, 1:17pm UTC](https://help.nextcloud.com/t/ocs-permissions-api/231793 "2025-09-10T13:17:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![smarinier](https://help.nextcloud.com/user_avatar/help.nextcloud.com/smarinier/32/56021_2.png) [@smarinier](https://help.nextcloud.com/u/smarinier)\
**Post date:** [September 10, 2025, 1:17pm UTC](https://help.nextcloud.com/t/ocs-permissions-api/231793/1 "2025-09-10T13:17:57Z")

</div>

Hi,

We have a client that is currently building a provisioning application, up to Nextcloud, using the OCS apis.  
At the moment, he is able to create and manage GroupFolders, but the permissions part is missing.  
What i’ve seen is that this seems to be only available via a DAV PROPATCH request or through occ groupdfolders:permissions command.

The DAV PROPPATCH is not very usable, as the path concerned by the PATCH need to include a user, already accessing to the folder from the groupfolders. This means your app need to take in account who is admin on wich groupfolder, identify as this person (not secure) and make the PROPPATCH.

The occ groupfolders:permissions covers the needs by its functionnalities. But it is not accessible through a distant API call.

My question is : is there a plannified task concerning these OCS API routes with groupfolders in the near future ?

Thanks,

---

<div class="post-metadata">

**Author:** ![jtr](https://help.nextcloud.com/letter_avatar/jtr/32/5_5575768a8748004e209b776fc1b2916d.png) [@jtr](https://help.nextcloud.com/u/jtr)\
**Post date:** [September 10, 2025, 5:32pm UTC](https://help.nextcloud.com/t/ocs-permissions-api/231793/2 "2025-09-10T17:32:22Z")

</div>

The underling code called by `occ groupfolders:permissions`is exposed via the documented [Groupfolders API](https://github.com/nextcloud/groupfolders/?tab=readme-ov-file#apis) best as I can tell. And it looks to be used [by the front-end for ACL management](https://github.com/nextcloud/groupfolders/blob/ba230fd891d6957672e93952c9d566f3d2828a51/src/settings/Api.ts#L88-L96).

---

<div class="post-metadata">

**Author:** ![smarinier](https://help.nextcloud.com/user_avatar/help.nextcloud.com/smarinier/32/56021_2.png) [@smarinier](https://help.nextcloud.com/u/smarinier)\
**Post date:** [September 10, 2025, 10:03pm UTC](https://help.nextcloud.com/t/ocs-permissions-api/231793/3 "2025-09-10T22:03:35Z")

</div>

The occ groupfolders:permissions cover a lot of functionalities.  
What you’ve mentionned are used in the “Settings” application (section of groupfolders) : what group is allowed to set advanced permissions on groupfolders. What we need is the part used in the “Files” application, on the sharing sidebar, and that allow to set advanced permissions on folders for groups and/or users (read, write, create, delete, share). This part is not covered (at the moment) by OCS API.