diff --git a/application/Cpeprovisioning/CpeprovisioningController.php b/application/Cpeprovisioning/CpeprovisioningController.php
index 6035bfa14..cadbffb81 100644
--- a/application/Cpeprovisioning/CpeprovisioningController.php
+++ b/application/Cpeprovisioning/CpeprovisioningController.php
@@ -9,8 +9,12 @@ class CpeprovisioningController extends mfBaseController
             if ($this->action !== 'CountOpenProvisionings') {
                 http_response_code(403);
                 die('Forbidden');
+            } else {
+                header("Access-Control-Allow-Origin: https://noc.xinon.at");
+                header("Access-Control-Allow-Methods: POST, GET, OPTIONS");
+                header("Access-Control-Allow-Headers: Content-Type, Authorization");
+                return;   
             }
-            return;
         }
 
         $this->needlogin = true;