С таким конфигом проблем:
Access is denied.
быть не должно.
New variant:
[webroot] comment = webroot path = /webroot public = yes writable = yes guest ok = yes browsable = yes create mask = 0644 force create mode = 0600 security mask = 0555 force security mode = 0600