What I was aiming for with this was to simplify the Gitea app install process for new instances. This would:
Remove the step where new app owners must change the root password and save it, eliminating the initial period where new installs are vulnerable to spam and abuse, and eliminating the need for a root user at all.
Allow for disabling username/password entry form, streamlining cloudron logins.
Derive Gitea Site Administrator privileges directly from app owner/operator role, simplifying app administrator delegation.
These goals are related to the default initial configuration of the gitea app, and are thus not possible to achieve with cloudron groups.
To do this, cloudron would need to:
Add a role claim (maybe roles plural) to the claims returned by getClaims, corresponding to the user's role assignment for that app.
Accept a PR to the gitea app that configures it to use these claims to set the site administrator role, after waiting for gitea to implement the ability to configure these settings from app.ini.
I understand if you are not interested at this time.