Ah ha! Line 210 in album.php:
PHP Code:
// don't show stuff for users awaiting moderation
if ($userinfo['usergroupid'] == 4 AND !($permissions['adminpermissions'] & $vbulletin->bf_ugp_adminpermissions['cancontrolpanel']))
{
print_no_permission();
}
So, it's hard-coded. Try removing those lines and then see if you have the same problem. (As is always suggested, try things out on a test site first before you go live.)