Sounds like uid 0 is being mapped to -2 over NFS and root is in a group that would give it permission to access that dir. Sudo doesn't change its groups when running things as root but su probably does. - todd