Ghost doesn’t respond with a 403 / permission error response for the image upload endpoint. If it was unable to write a file due to permissions it would return a 500.
My money is on something in your server or network setup that is blocking the request. Do you use Cloudflare? A search of the forum shows others had problems with Cloudflare blocking image uploads: