diff --git a/lib/Controller/FolderController.php b/lib/Controller/FolderController.php
index ec82dd7e4..f723bd9ef 100644
--- a/lib/Controller/FolderController.php
+++ b/lib/Controller/FolderController.php
@@ -99,6 +99,7 @@ private function formatFolder(array $folder): array {
 	/**
 	 * Gets all Groupfolders
 	 * @NoAdminRequired
+	 * @RequireGroupFolderAdmin
 	 * @param bool $applicable Filter by applicable groups
 	 * @return DataResponse<Http::STATUS_OK, array<string, GroupFoldersFolder>, array{}>
 	 * @throws OCSNotFoundException Storage not found
@@ -132,6 +133,7 @@ public function getFolders(bool $applicable = false): DataResponse {
 	/**
 	 * Gets a Groupfolder by ID
 	 * @NoAdminRequired
+	 * @RequireGroupFolderAdmin
 	 * @param int $id ID of the Groupfolder
 	 * @return DataResponse<Http::STATUS_OK, GroupFoldersFolder, array{}>|DataResponse<Http::STATUS_NOT_FOUND, list<empty>, array{}>
 	 * @throws OCSNotFoundException Groupfolder not found
@@ -423,6 +425,7 @@ private function folderDataForXML(array $data): array {
 	/**
 	 * Searches for matching ACL mappings
 	 * @NoAdminRequired
+	 * @RequireGroupFolderAdmin
 	 * @param int $id The ID of the Groupfolder
 	 * @param string $search String to search by
 	 * @return DataResponse<Http::STATUS_OK, array{users: list<GroupFoldersUser>, groups: list<GroupFoldersGroup>}, array{}>