diff --git a/src/org/openbravo/retail/posterminal/utility/CheckApproval.java b/src/org/openbravo/retail/posterminal/utility/CheckApproval.java
--- a/src/org/openbravo/retail/posterminal/utility/CheckApproval.java
+++ b/src/org/openbravo/retail/posterminal/utility/CheckApproval.java
@@ -30,6 +30,7 @@
 import org.codehaus.jettison.json.JSONObject;
 import org.hibernate.criterion.Restrictions;
 import org.hibernate.query.Query;
+import org.openbravo.base.secureApp.AllowedCrossDomainsHandler;
 import org.openbravo.dal.core.OBContext;
 import org.openbravo.dal.service.OBCriteria;
 import org.openbravo.dal.service.OBDal;
@@ -58,6 +59,8 @@
   @Override
   public void doGet(HttpServletRequest request, HttpServletResponse response)
       throws IOException, ServletException {
+    // always set the cors headers
+    AllowedCrossDomainsHandler.getInstance().setCORSHeaders(request, response);
 
     OBContext.setAdminMode(false);
     try {