It looks like the permissions are fine on the files and the folder. I don't know very much about the web stuff, so that's pretty much all I know how to check.
This might be helpful:
HTTP Error 403 is caused by a web server believing that data sent by the client is correct, but also that the actual access to the data is forbidden or disallowed by the authorizer.
So it’s basically telling you that the page is there, but you’re not permitted to view it.
The thing which confuses many web users is that the same page can be accessible via different means. For example, you might be able to view it when clicking a link in another page. But if you try to bookmark the destination page itself, you’ll be returned with a 403 error when you later try to return to it. Why is this?
Well, by far the most common reason is a configuration setting known as directory browsing.
Directory browsing is where we enter the folder rather than the file itself, as a means of navigating the website.
A more obscure reason is simply that the website has changed web server and is now being hosted elsewhere. If the host has “cancelled” the directories to the old site, it may still take a little time before the client is redirected to the new location. During this time window, a 403 error is likely to be displayed.
If you’re having trouble with your own website, it’s a good idea to contact your host and query whether directory browsing is allowed. Some hosts are extremely picky and disable direct page accessing altogether. This effectively means that every page must be accessed from another hyperlink. You can’t simply type in the URL without receiving an error, usually the 403 Forbidden Access that we’ve discussed.