Fixing annoyingness: To avoid the CGI permissions error appearing continuously in the (localhost) log, need privileged=true set in the root context.xml file too, not just greenstone context file.