The variable that is causing the message that "access to this area is ... forbidden" using Insert Image is: editor.allowupload.  Seems to not allow uploads if the Session (admin access level is <2).

1. Where is this "admin level" set?
2. What do I need to do to set it to allow uploads by client websites?