Apache is creating the files as -rw-rw---- permission and reading it back seems to be a problem for some strange reason even though the owner is the same as what Apache is suExec

so everytime i create something new in sugar - like a new diagnostics or web to lead i am unable to download for i get 403 permission.

-----

In /var/www/clients/client2/web13/web I created a php script called test.php contents:

<?
system("echo '<h1>Test generated html</h1>'
> /var/www/clients/client2/web13/web/test.html");
echo "ok";
?>

I then go to http://devcrm.ccint.net/test.php script returns "ok" as planned. After that I browse to http://devcrm.ccint.net/test.html (which is the file the php script created) and the "website" opens fine. This is a direct simulation of what Sugar is doing except Sugar doesnt work?
How is this possible? This system is running suPHP aswell which means all PHP scripts that are run are run under the correct user (web13 being this one).

----

i then putty up and change permision then i can download, but when i do the next one 403 error again.
As a temp work around i add a cronjob script that chmod's that entire dir every 1 minute to give right security, but that is a workaround not a solution.