I tried your method and added 'ALLOW_ADMIN = *' in my config, but still got the same error.
Did you restart condor after changing the config?
Do you have other suggestions?
You can check the MasterLog for specifics about why permission was denied.
-- ToddM