In case anyone finds this thread seeking a solution, here's what worked for me- I wrote my host and told them about what I'd learned in this discussion. They wrote back with this reply:
"This is actually a security feature of suphp. I have gone ahead and disabled it by modifying your suphp.conf file to include the line:
check_vhost_docroot=false
As you can see, when this is enabled, you will not be able to execute PHP scripts external to their appropriate document roots. Please consider whether or not you actually want this disabled; if not, we can simply turn it back on for you and we'll find another solution for your needs."
So, it is both suPHP related, and indeed a permissions issue, but a simple fix.
Good luck, and I hope this saves someone a headache