Folders follow up

Initial follow-up, still some pending
`getFolders` is not necessarily a good name for a function that also checks if the current user can manage them. Something like `canManageFolders` would be better, returning an error when not all of the folders exist/can be managed