You need the user_likes
or friends_likes
permission to get this.
If it is not set to public, you need to also have a user access_token
from a user who can see this information.
If you are trying to circumvent a user's privacy options, that is a good way to get your app banned.