[webizen]

for shared hosting, 0640 permission should be OK.

pls enable debug logging (loglevel -> low) via Admin Console and check error log (i.e., /usr/local/apache/logs/error_log) for more details of 403 error.