If your web1 "user" is associated with the example.com domain, you'll be able to see it if you made that directory.
Your 403 error is probably due to permissions on the subdirectory (and/or *.html file) when you created it.
You'll want directory permissions of "775" or drwxrwxr-x. The key is the "other" permissions. The directory has to be flagged as "other" read/execute, and the various *.html files (or whatever files) as "other" read permissions.