I suspect its read permission on the custom object for customer portal profile and make sure object is available for customer portal
NOTE:If you are using HVCP profile the you will have to clone the profile and then you can give access to custom objects