CB Auto Actions: email field substitutions

If [cb_salutation] is accessible why is [cb:userfield field="cb_salutation" /] not accessible after I substitute the first with the latter?

PS: Can you please take out the "Flood protection! Please wait 240 seconds before submitting an another message." or set it to a reasonable time like 24 sec, thanks.

If [cb_salutation] is accessible why is [cb:userfield field="cb_salutation" /] not accessible after I substitute the first with the latter?

Because [FIELD_NAME] substitutions are raw database values. They have no access controls. Ensure cb_salutation is visible to the user. If it's not set to display on profile then a userfield substitution won't be able to substitute it in. If you don't want it actually visible then move it to a tab in a not shown on profile tab position.

This field is visible everywhere except for searchable. I dont know what else to switch on.

Is the field actually visible on the users profile to a public user? Since this is being sent during or after the registration process the viewing user is a public user. What trigger are you acting on?

Is the field actually visible on the users profile to a public user?
==> yes

It is an email action onAfterUserConfirmation.

I cant find the drop down in the field to set it to the public view level. The action is set to "all".

I don't know what more to suggest. The substitution should be working fine. That trigger contains the users object so User set to Automatic should have no issues finding their user object. If the field truly is visible to them it will substitute in fine. The below works perfectly fine in my tests.

Global
Triggers: onAfterUserConfirmation
Type: Email
User: Automatic
Access: Everybody
Action
Body:
Leave To empty as it will automatically handle sending to the user object of the auto action.