From b088314c38f8ab3c4664b1d0b0c24e598096036d Mon Sep 17 00:00:00 2001
From: Meteo <marco@mooij.me>
Date: Sun, 14 Jun 2026 23:12:17 +0200
Subject: [PATCH] Added GET API call for group-permissions

---
 pub/api/classes/API_permissions.php                      | 9 +++++++++
 pub/api/v1/portal-management/group-permissions/index.php | 6 +++++-
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/pub/api/classes/API_permissions.php b/pub/api/classes/API_permissions.php
index 05895ed..c53eee9 100644
--- a/pub/api/classes/API_permissions.php
+++ b/pub/api/classes/API_permissions.php
@@ -120,4 +120,13 @@ class API_permissions extends API
 
         return $access_rights;
     }
+
+    public function getUserGroupPermissions()
+    {
+        list($query, $types, $params) = $this->buildDynamicQuery('system_user_group_permissions');
+
+        $items = $this->generalGetFunction($query, $types, $params, false, 'userGroupPermissions');
+
+        return ($items);
+    }
 }
\ No newline at end of file
diff --git a/pub/api/v1/portal-management/group-permissions/index.php b/pub/api/v1/portal-management/group-permissions/index.php
index 11319bf..dbfce65 100644
--- a/pub/api/v1/portal-management/group-permissions/index.php
+++ b/pub/api/v1/portal-management/group-permissions/index.php
@@ -11,7 +11,11 @@ $API_permissions = new API_permissions();
 $API_usergroups = new API_usergroups();
 
 if ($API_permissions->request_method === 'GET') {
-    # to be made, get all the access-rights and implement the builder
+    $API_usergroups->checkPermissions('admin-access-control-permissions', 'RO');
+
+    $permissions = $API_permissions->getUserGroupPermissions();
+
+    $API_permissions->apiOutput($code = 200, ['success' => $permissions]);
 
 } elseif ($API_permissions->request_method === 'PUT') {
     # when called from the frontend will not be forwarding to a url since when its called from the frontend it doesnt need a redirection