If permissions are ok, then I'm wondering if this is something like mod_security where it's detecting a few keywords and just giving a total forbidden on the script? I worked on a site that had mod_security enabled and ended up with the same error about a month ago.
