ok, i found it! :)

GDBM_File::TIEHASH obviously needs the file permissions, even when being called for reading only. this ought to be considered a bug, see http://www.csa.iisc.ernet.in/old-website/Department_Resources/Hypertext/gdbm/gdbm_4.html#SEC4