for those people using CVS checkouts which are probably owned by their user, running emerge --sync on that checkout will change the permissions to root:root
Reduced the check so that sync is allowed if you're a member of the portage group and have write access to $PORTDIR.
This has been released in 2.1.3_rc6.