Instead of finding reasons to not do the troubleshoot steps, please just do them.
It begins from the most basic of areas to more advanced areas. Did this happen after creation and usage of your custom plugin? Was CB core files edited in any way? Using any ACL components such as JACL? Ran CB tools to resync and repair your users?