In addition to group readable, you might want to try making the directory public readable and executable, for example:
service1# ls -dl sql-ledger drwxrwxr-x 12 service1 web 1024 Aug 27 13:29 cgi service1#
hth
