Is it intentional to not let the API user change multiple values at the same time ? For example set publicUpload to true and set a password at the same time ?
This means the user needs to make two calls. If they anyway need to make at least 2 calls, they might choose to rather delete the share and recreate it with the new settings.