The endpoint for setting permissions in api will now be used for both user permissions and a user's folder permissions, so this changes the format of the data we pass through.