Ok, then it was just profile privacy blocking access. Suggest reviewing how you've configured the privacy_profile field within CB > Field Management to ensure it's configured how you want it. For example if the Default is set to Private then profiles will be private by default. The Default can also be set globally within CB Privacy plugin parameters if one isn't set in the field itself.