I *think* what is probably happening is it's not rebuilding the user's cached permissions. Once they leave the forum and come back so their permissions are rebuilt then it allows the access. So, for now what they can do is just do a logout and then log back in and they should have the permission right away.
What we'll need to do is modify the paypal-ipn script so it rebuilds the users permissions when the payment is received.
